ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Feel like a WTF moment to start your Monday? Blank password = full access to AMT

    News
    9
    11
    1.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • NashBrydgesN
      NashBrydges
      last edited by

      Is it just me or are we hearing about these things almost every other day?

      https://www.theregister.co.uk/2017/05/05/intel_amt_remote_exploit/

      1 Reply Last reply Reply Quote 5
      • DustinB3403D
        DustinB3403
        last edited by

        Ok... Intel you don't have to try and be as bad as lenovo.....

        1 Reply Last reply Reply Quote 1
        • scottalanmillerS
          scottalanmiller
          last edited by

          Fail WTF

          1 Reply Last reply Reply Quote 0
          • travisdh1T
            travisdh1
            last edited by

            Well, you do have to give them credit. That first AMT exploit was ignored for 10 years, that's one up on even Lenovo. In a category you really don't want to play one upsmanship in.

            1 Reply Last reply Reply Quote 0
            • CloudKnightC
              CloudKnight
              last edited by

              😑

              1 Reply Last reply Reply Quote 0
              • DashrenderD
                Dashrender
                last edited by

                Yeah... Ready to not get BIOS/UEFI updates that we desperately need for security.. 😞

                stacksofplatesS 1 Reply Last reply Reply Quote 1
                • stacksofplatesS
                  stacksofplates @Dashrender
                  last edited by

                  @Dashrender said in Feel like a WTF moment to start your Monday? Blank password = full access to AMT:

                  Yeah... Ready to not get BIOS/UEFI updates that we desperately need for security.. 😞

                  Ya and people criticized Shuttleworth for saying we need open firmware.

                  DashrenderD 1 Reply Last reply Reply Quote 1
                  • momurdaM
                    momurda
                    last edited by

                    This showed up in my daily CERT email alerts at 12:11am today. Incredible.

                    1 Reply Last reply Reply Quote 0
                    • DashrenderD
                      Dashrender @stacksofplates
                      last edited by

                      @stacksofplates said in Feel like a WTF moment to start your Monday? Blank password = full access to AMT:

                      @Dashrender said in Feel like a WTF moment to start your Monday? Blank password = full access to AMT:

                      Yeah... Ready to not get BIOS/UEFI updates that we desperately need for security.. 😞

                      Ya and people criticized Shuttleworth for saying we need open firmware.

                      What ever happened to the open networking gear firmware projects? Are they a failure to launch out of the gate because possibly without close ties between hardware and software, you can't get the performance that those who control the whole thing can?

                      1 Reply Last reply Reply Quote 0
                      • DashrenderD
                        Dashrender
                        last edited by

                        What's interesting is that this was the primary topic of Security Now last week on May 2. I'm only listening to it now though.

                        1 Reply Last reply Reply Quote 0
                        • DanpD
                          Danp
                          last edited by

                          https://www.bleepingcomputer.com/news/security/malware-uses-obscure-intel-cpu-feature-to-steal-data-and-avoid-firewalls/

                          1 Reply Last reply Reply Quote 2
                          • 1 / 1
                          • First post
                            Last post