b********n 发帖数: 38600 | 1 https://www.techpowerup.com/238514/intel-cpu-on-chip-management-engine-runs-
on-minix
Google wants to remove MINIX from its internal servers
According to Google, which is actively working to remove Intel’s Management
Engine (MINIX) from their internal servers (for obvious security reasons),
the following features exist within Ring -3:
-Full networking stack
-File systems
-Many drivers (including USB, networking, etc.)
-A web server
That’s right. A web server. Your CPU has a secret web server that you are
not allowed to access, and, apparently, ((((Intel)))) does not want you to
know about. | b********n 发帖数: 38600 | 2 Red alert! Intel patches remote execution hole that's been hidden in chips
since 2010
https://www.theregister.co.uk/2017/05/01/intel_amt_me_vulnerability/
If Intel's management software can send out-of-band commands to trigger
something in the management chip, then so can someone 'else'
You have one of those potentially insecure IoT devices sitting right in your
CPU. |
|