Intel Releases Linux-Compatible Tool For Confirming ME Vulnerabilities

[bridgman]

You're talking about how a hypothetical attack might be able to be triggered (assume you're talking about "backdoor data packet" as the trigger ?).

I'm talking about how it gets data back to the hypothetical bad guys - maybe print a message on the console asking you to "mail the flash stick to the following address in Maryland" ?

[numacross]

I'm talking about how it gets data back to the hypothetical bad guys - maybe print a message on the console asking you to "mail the flash stick to the following address in Maryland" ?

UEFI Network Stack?

[Brisse]

UEFI Network Stack?

Disabled as default, at least on my motherboard.

[numacross]

Disabled as default, at least on my motherboard.

The code is still there, just "disabled".

[bridgman]

I didn't think the UEFI network stack was available at runtime, just boot time (for PXE).

[numacross]

I didn't think the UEFI network stack was available at runtime, just boot time (for PXE).

Even if, then let's just crash the kernel (or NMI, or ACPI or simulate Ctrl+Alt+Del with the USB-to-PS/2 SMM), force a reboot, get to UEFI-level and use the network stack. As long as the code exist to access the built-in NIC from UEFI it can be used.

[Almindor]

You're thinking the PSP has driver code in it for all the NICs it is likely to encounter ? Still scratching my head.

It only needs a few drivers for the built-in NICs in majority of motherboards. You don't need to have 100% coverage. The rest is easy, just install a kernel-memory level rootkit/malware, you only need 5-10 versions for OS/version matches needed if you have full RAM access. Then the malware takes care of the networking,. It's more visible but if you REALLY need it you can do it that way.