91–93 of 93 posts
God #$%@ing damn it, this is why we can't have nice things. You can do only so much to not get pwned software wise, now you need to be paranoid about the hardware too?! Going through all Xeon servers is going to be fun tomorrow.
Xeon servers don't have AMT, but you might want to verify that your BMCs are firewalled and fully patched.
$ ls /dev/mei0 -lh
crw------- 1 root root 246, 0 May 15 21:02 /dev/mei0
Is there a way to completely remove AMT ?
Earlier quoted context omitted.
Moreover there is no trivial way to verify that https://github.com/mjg59 is github accout of Matthew Garrett. So all one needs to do is to create account that looks good and most people assume that it's safe. Obviously I'm not saying that this is the case here. But it might not be the best idea to run whichever github project someone links to under root.
Yep, that's what I thought, too :-D I tried to find some "Github" link in mjg59.dreamwidth.org pointing to github.com/mjg59, but I don't think there is any. Definitely, you don't feel comfortable cloning and building a git repo to run it as root :P
There is one here: https://mjg59.dreamwidth.org/38136.html