Interesting People mailing list archives

The hijacking flaw that lurked in Intel chips is worse than anyone thought


From: "Dave Farber" <farber () gmail com>
Date: Sat, 6 May 2017 13:13:12 -0400




Begin forwarded message:

From: Lauren Weinstein <lauren () vortex com>
Date: May 6, 2017 at 12:15:54 PM EDT
To: nnsquad () nnsquad org
Subject: [ NNSquad ] The hijacking flaw that lurked in Intel chips is worse than anyone thought


The hijacking flaw that lurked in Intel chips is worse than anyone thought

https://arstechnica.com/security/2017/05/the-hijacking-flaw-that-lurked-in-intel-chips-is-worse-than-anyone-thought/

     A remote hijacking flaw that lurked in Intel chips for seven
   years was more severe than many people imagined, because it
   allowed hackers to remotely gain administrative control over
   huge fleets of computers without entering a password.  This is
   according to technical analyses published Friday.  As Ars
   reported Monday, the authentication bypass vulnerability
   resides in a feature known as Active Management Technology.
   AMT, as it's usually called, allows system administrators to
   perform a variety of powerful tasks over a remote connection.
   Among the capabilities: changing the code that boots up
   computers, accessing the computer's mouse, keyboard, and
   monitor, loading and executing programs, and remotely powering
   on computers that are turned off. In short, AMT makes it
   possible to log into a computer and exercise the same control
   enjoyed by administrators with physical access.

- - -

--Lauren--




-------------------------------------------
Archives: https://www.listbox.com/member/archive/247/=now
RSS Feed: https://www.listbox.com/member/archive/rss/247/18849915-ae8fa580
Modify Your Subscription: https://www.listbox.com/member/?member_id=18849915&id_secret=18849915-aa268125
Unsubscribe Now: 
https://www.listbox.com/unsubscribe/?member_id=18849915&id_secret=18849915-32545cb4&post_id=20170506131321:4C1CE2EC-327F-11E7-A273-C55E69FE42D7
Powered by Listbox: http://www.listbox.com

Current thread: