New Intel Vulnerability found, Converged Security and Management Engine exploitable
Click here to post a comment for New Intel Vulnerability found, Converged Security and Management Engine exploitable on our message forum
Picolete
Another month another vulnerability.
airbud7
Beware the stranger with the thumb drive at your computer!
And don't take candy from strangers...
sverek
And hope it's not Intel in your pants.
jaggerwild
LOLZ^
And now back to your corona Fear mongering..........
airbud7
You park your car at work and start walking to your office building. You look down and see a shiny new 32GB thumb drive lying on the path. You think someone must have dropped it, so you pick it up, put it into your pocket, and go up to your office.
Since you’re a good human being, you want to return it to whoever lost it, in case there are important work documents or someone’s novel-in-progress on there. So, you do what most people would do and plug it into your computer in the hopes of finding something on the drive that identifies the owner.
This, my friend, is what’s known in the world of infosecurity as a ‘candy drop’ - an intentionally placed USB device dropped in plain sight, which tempts a target to pick it up and plug it in.
mohiuddin
Well, COVID-19 Fear ,my firend , will help that person to prevent himself from this kind of mishaps . How? Go figure:p
Alessio1989
Having an Intel CPU is more dangerous than running naked through a vaporized COVID-19 cluod.
airbud7
better have plastic gloves on before you pick up that infected thumb drive 😛
Kool64
if a stranger with a thumb drive makes it to my computer all that the’ll have left is a thumb....
jaggerwild
Scratches head, huh? Me no likely! 😕
XP-200
Intel, the gift that keeps on giving.
schmidtbag
Run a Linux live CD/USB to open it up. Not only will it not run any automated binaries, but even if it does, you've basically got a sandbox OS running entirely in RAM for it to destroy instead of anything actually important. If you find it was honestly someone's missing drive, great - you get to return it. If you find it was a ploy to steal your information or ruin your day, great - just format the drive and now you've got a 32GB drive for free.
Win-win.
Crazy Serb
Case with teeth? That sounds like guru3D case of the month material!
mbk1969
Hey, do you know a guru CrazY_Milojko by chance? I miss him...
mbk1969
What about malware firmware? (Or even a spying SoC instead of plain USB electronics...)
PS Nice name for a music band "Malware Firmware", eh?
The Laughing Ma
Look we know fine well the only reason anyone is checking out that drive is to see what kind of porn is on it.
I would say something stupid like I am glad I went AMD this time round but given that most of these vulnerabilities require what amount to direct access to my computer to be of any reals threat I suspect that the model of CPU I am using would be the least of my concerns.
Kool64
More like an industrial grinder but yes.....
tsunami231
YAY wait BOOO
Waits for held line " human" are flawed and are "security risk" head to nears human recycling plant for re purposing.
Seriously thought this getting rather stupid they are just looking for flaws at this point and released it to public to cause things, Before the whole Meltdown/spectre thing there was very lil of this news now it like the in thing to do.
AMD already had "new" architecture with ryzen, so they spare at lest till all these people that out Intel flaws turn the attention to AMD. Intel been using same architecture for better part of decade with the iX cores? Even if Intel were to announced new architecture ( from the ground up) it would be years before its ready, and even when it is they would just start picking that apart, cause the in thing to to look for flaws. There will always be flaws and security issue in all tech. there no need to purpose go out ones way to find them put all that info out in the public for all to know and make things worse.
I get these thing should be fixed, but it shouldnt be outed to public so everyone knows include the shady people that would use those flaws, but didnt know about till it was outted publicly
schmidtbag
When it comes to firmware, I figure the worst-case scenario is it will either depend on software on the drive itself to do damage, or, it will just simply damage the files on the drive (better that than anywhere else). For example, there are those drives that lie about their capacities - that's basically malware firmware.
As for a whole SoC, a live OS will still protect it from doing any real harm if the primary goal is to just see what's on the "drive". There's only so much those things can do.
mbk1969
What about user using the thumb on his main OS after he wiped the thumb (thinking he is safe)?
