Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Intel AMT Checker for Linux

github.com

Post reply on HN
Print view View original

1–10 of 93 posts

Re: Intel AMT Checker for Linux

#4

Post by yorwba »

Artlav wrote: post #2

So, if it says "Error: IOCTL_MEI_CONNECT_CLIENT receive message. err=-1", what does it mean? Tried it on i5-6260U, should be new enough to have the thing.

> Requires that the mei_me driver (part of the upstream kernel) be loaded.

Maybe the driver isn't loaded?

Re: Intel AMT Checker for Linux

#5

Post by Artlav »

yorwba wrote: post #4
Artlav wrote: post #2

So, if it says "Error: IOCTL_MEI_CONNECT_CLIENT receive message. err=-1", what does it mean? Tried it on i5-6260U, should be new enough to have the thing.

> Requires that the mei_me driver (part of the upstream kernel) be loaded. Maybe the driver isn't loaded?

It is.

Re: Intel AMT Checker for Linux

#8

Post by d33 »

lclarkmichalek wrote: post #7
d33 wrote: post #6

"Intel AMT: ENABLED, AMT is unprovisioned". Does that mean AMT is still potentially vulnerable to attacks from user/kernelspace?

From the readme: In this state, AMT is not vulnerable to CVE-2017-5689.

Thanks! Missed this part. Also, do you think it's a good idea to keep it in this state as opposed to updating in case Intel's new patches lock AMT down even further? This is the pattern I saw with Sony once - groups of users not updating their consoles because via exploiting it they could get more control over it.

Re: Intel AMT Checker for Linux

#10

Post by SSLy »

guipsp wrote: post #3
Artlav wrote: post #2

So, if it says "Error: IOCTL_MEI_CONNECT_CLIENT receive message. err=-1", what does it mean? Tried it on i5-6260U, should be new enough to have the thing.

Upgrade your kernel, or build the kernel with the AMT module

4.10 is fairly new, and the amt mod is loaded
Post reply on HN