Really nice achievement!!!
Game over! We (I and @_markel___ ) have obtained fully functional JTAG for Intel CSME via USB DCI. #intelme #jtag #inteldcipic.twitter.com/cRPuO8J0oG
-
-
-
Thanks!
End of conversation
New conversation -
-
-
Super nice to be your angel at 33c3, are you presenting at 34c3?
-
It was nice for me too! I hope;)
End of conversation
New conversation -
-
-
Congratulations guys! Very impressive. Awaiting your presentations.
-
Thanks!
End of conversation
New conversation -
-
-
USB DCI is off by default right ? Or does this get round that limitation ?
-
Don't worry, this ability is disabled by default
End of conversation
New conversation -
-
-
good but bad at the same time because if you find a way to remove it then hackers the really bad ones or just malicious ones can the use what you make and reverse engineer a way to brick every computer virtually in the world unless you kill the internet part of that OS completely
-
It's over jtag (so /theoretically/ requires a physical connection). The web server bug a while ago was arguably worse.
-
But the important thing is that someone publicly saying they found this changes /nothing/. Finding an exploit does not mean creating it: the exploit was already there, and there's no way to know whether someone else has already been quietly exploiting it.
-
..but now that the black box of the ME is open, it could be ripe for other exploits..not found yet
-
That exactly is the real threat here. It was only a matter of time until someone opened this up. No one writes perfect software. There WILL be an exploit found. I'm thankful this is public so we can get ahead of them by doing our own audits.
End of conversation
New conversation -
-
-
Good work ! ...Intel to add a Ring -5 any moment now :D
-
Ring -8, where we find out there is really a MIPS underneath the x86...
-
After about -31 rings, it's just turtles all the way down.
-
It rings back on itself and your back in userland.
End of conversation
New conversation -
-
-
Does this have anything to do with your announcement that is spooking intel users who don't understand it. Jan 2017 article about jtag dci hacking.https://www.digitaltrends.com/computing/intel-kaby-lake-skylake-pcs-hackable-usb-jtag/ …
-
Indirectly
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.