Live data from Hacker News

Intel patches new ME vulnerabilities

blog.ptsecurity.com

11–20 of 337 posts

Re: Intel patches new ME vulnerabilities

#11
post #5

I wonder, who ever uses these "management engines," let alone put them open on WANs? When first news of IME being compromised, I was surprised that Shodan showed such a small number of machines.

IME, most large organizations are extremely bad at preventing their employees from allowing strangers into their buildings.

Re: Intel patches new ME vulnerabilities

#12

Earlier quoted context omitted.

My i7-2600 is still a beast (well, still gong strong anyway). They did the same thing with Meltdown/Spectre fixes.

Grandpa, it's time to upgrade.

Why? Because it's been longer than intel would like since parent gave them money?

Re: Intel patches new ME vulnerabilities

#14
post #5

I wonder, who ever uses these "management engines," let alone put them open on WANs? When first news of IME being compromised, I was surprised that Shodan showed such a small number of machines.

When dealing with consumer-grade network equipment, this is the same question that always comes to my mind: who decided these devices should have their management features open for WAN access by default?

I'm still not sure if it was an early 2000s fad that nobody really thought about, or it was deliberate (and if so, why).

Re: Intel patches new ME vulnerabilities

#15
post #2

Intel advisory: https://www.intel.com/content/www/us/en/security-center/advi... CVE-2018-3628 - "Buffer overflow in HTTP handler" Affected processor list (simplified reordered by me to reflect relevance and improve readability): • Core i3/i5/i7, generation 1-8 (that is, all of them) • Xeon E3-1200 v5/v6 • Xeon Scalable • Xeon W • Core 2 Duo vPro, Centrino 2 vPro

I'm oddly lucky that I based my fanless server off an old Atom platform.

Re: Intel patches new ME vulnerabilities

#16

Earlier quoted context omitted.

My i7-2600 is still a beast (well, still gong strong anyway). They did the same thing with Meltdown/Spectre fixes.

Grandpa, it's time to upgrade.

with an entry-level GPU and slow RAM that works with an i5-2500k, i can play every modern game i have tried on high.

Nothing about me opening a text editor, interpreting most code, or compiling the occasional thing require anywhere near that much power.

For the overwhelming majority, and i really mean overwhelming, there's really no progress or point to upgrading anything except the gpu in the past 7 years or so

in laptops, new stuff uses a LOT less power for the same speed, so there's that I guess.

Post reply on HN