Any word on AMD's equivalent in Ryzen CPUs ?
Attacking #IntelME by @h0t_max & @_markel___ at #BHEU
1. Requires malformed file on SPI flash (needs physical access or bug in BIOS)
2. Bug in early-loaded module, so ME "disabling" by HAP is not a cure
3. Culprit is classic(!) stack overflow
4. Full code exec in ME
Congrats!pic.twitter.com/own7OZCgxg
-
-
-
I guess AMD vs. Intel is like Mac vs. PC in the past: barely anybody looks at them because so few people use them.
- Još 1 odgovor
Novi razgovor -
-
-
Is this just 0086? Doesn’t include unpatched May’s 0075 for remote exploitation?
@mjg59 -
As I understand it: 0075 plus 0086 gives you remote execution as *AMT*. If it's possible to reflash the BIOS from there then can you escalate that to full ME.
- Još 1 odgovor
Novi razgovor -
-
-
Thanks a lot!!!
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
@Puri_sm looks like new work is incoming!?Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Thank you!
-
Very nice :) are there any public slides/video/paper ?
Kraj razgovora
Novi razgovor -
-
-
Was it a strcpy?
-
Scratch that. I still want to yell at people to use annex K functions.
Kraj razgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.