Another AMT flaw. It's important to note that this requires *physical access* to exploit. There are few threat models likely to be impacted by the issue. That said, it's a big deal for those who regularly leave laptops unsecured, particularly overseas.https://thehackernews.com/2018/01/intel-amt-vulnerability.html …
-
-
Not really. How is this a flaw?
-
This requires physical access. And its an admins fault if they dont change passwords. This isnt a flaw.
-
Yay for blaming the user.
-
whats your "solution" to this alleged flaw?
-
Disabled by default, no default password when enabled.
-
You realize this is a chip feature. Its interface is always enabled. Next youre gonna ask bios to be disabled by default. Now i think what might be good is to force admin to setup password at first boot. But its still admins responsibility
-
This isnt a flaw. And the security threat model is super tight on this one. Admins should be configuring responsibly
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.