Overclock.net › Forums › Industry News › Hardware News › [Phoronix] Intel Confirms Vulnerability In Intel AMT/ME (Management Engine)
New Posts  All Forums:Forum Nav:

[Phoronix] Intel Confirms Vulnerability In Intel AMT/ME (Management Engine) - Page 2

post #11 of 16
So is this a new one now? Or is Intel just finally confirming after looking into the last vulnerability of their management engine that came up about 5-6 months ago?
Gaming
(17 items)
 
Gaming PC
(20 items)
 
 
CPUMotherboardGraphicsRAM
7700K AS Rock Z170 OC Formula Titan X Pascal 2050MHz 64GB DDR4-3200 14-14-14-34-1T 
Hard DriveHard DriveHard DriveCooling
950 EVO m.2 OS drive 850 EVO 1TB games drive Intel 730 series 500GB games drive Custom water cooling 
OSMonitorKeyboardPower
Win 10 Pro x64 AMH A399U E-Element mechanical, black switches, Vortex b... EVGA G3 1kw 
CaseMouseAudioAudio
Lian-Li PC-V1000L Redragon M901 LH Labs Pulse X Infinity DAC Custom built balanced tube amp with SS diamond ... 
Audio
MrSpeakers Alpha Prime 
  hide details  
Reply
Gaming
(17 items)
 
Gaming PC
(20 items)
 
 
CPUMotherboardGraphicsRAM
7700K AS Rock Z170 OC Formula Titan X Pascal 2050MHz 64GB DDR4-3200 14-14-14-34-1T 
Hard DriveHard DriveHard DriveCooling
950 EVO m.2 OS drive 850 EVO 1TB games drive Intel 730 series 500GB games drive Custom water cooling 
OSMonitorKeyboardPower
Win 10 Pro x64 AMH A399U E-Element mechanical, black switches, Vortex b... EVGA G3 1kw 
CaseMouseAudioAudio
Lian-Li PC-V1000L Redragon M901 LH Labs Pulse X Infinity DAC Custom built balanced tube amp with SS diamond ... 
Audio
MrSpeakers Alpha Prime 
  hide details  
Reply
post #12 of 16
I think the thing that's missed for a lot of people is that the ports need to be open to be hacked from the outside. Sort of like remote desktop.
Unicycle
(16 items)
 
  
CPUMotherboardGraphicsGraphics
Intel i7 920 stock Asus P6T EVGA GTX 260 EVGA GTX 260 
RAMRAMHard DriveOptical Drive
6GB OCZ Osbidian DDR3 Triple Channel @ ~1600mhz 12GB DDR3 Triple channel @ ~1600mhz 150GB Velociraptor, 1TB Caviar Black Asus generic CD/DVD R/W 
OSMonitorMonitorKeyboard
Windows 7 Ultimate x64 2x Emerson 30" TV Generic CRT ~15" 3x non gaming USB keyboards 
PowerMouse
800W Kingwin Modular Power Razer Copperhead Chaos Green, Razer Naga Molten... 
  hide details  
Reply
Unicycle
(16 items)
 
  
CPUMotherboardGraphicsGraphics
Intel i7 920 stock Asus P6T EVGA GTX 260 EVGA GTX 260 
RAMRAMHard DriveOptical Drive
6GB OCZ Osbidian DDR3 Triple Channel @ ~1600mhz 12GB DDR3 Triple channel @ ~1600mhz 150GB Velociraptor, 1TB Caviar Black Asus generic CD/DVD R/W 
OSMonitorMonitorKeyboard
Windows 7 Ultimate x64 2x Emerson 30" TV Generic CRT ~15" 3x non gaming USB keyboards 
PowerMouse
800W Kingwin Modular Power Razer Copperhead Chaos Green, Razer Naga Molten... 
  hide details  
Reply
post #13 of 16
Thread Starter 
Quote:
Originally Posted by sumitlian View Post

Just found this while walking through the phronix's comment section for that article.
Man, this guy is not average joe. And if he says so, then it is not a conspiracy theory ANYMORE, at all. redface.gif
From wiki, "Richard Matthew Stallman (born March 16, 1953), often known by his initials, rms,[1] is an American software freedom activist and programmer. He campaigns for software to be distributed in a manner such that its users receive the freedoms to use, study, distribute and modify that software. Software that ensures these freedoms is termed free software. Stallman launched the GNU Project, founded the Free Software Foundation, developed the GNU Compiler Collection and GNU Emacs, and wrote the GNU General Public License.

Stallman launched the GNU Project in September 1983 to create a Unix-like computer operating system composed entirely of free software.[2] With this, he also launched the free software movement. He has been the GNU project's lead architect and organizer, and developed a number of pieces of widely used GNU software including, among others, the GNU Compiler Collection,[3] the GNU Debugger[4] and the GNU Emacs text editor.[5] In October 1985[6] he founded the Free Software Foundation.
"


Edit: His wiki page also doesn't contain "Controversy" section in "Contents" yet. biggrin.gif

I have a lot of respect for the projects he has helped bring to fruition. However, his page is a little tin-foil hat. Website XYZ uses nonfree javascript, so avoid or disable javascript. He does raise a ton of valid points in regards to Facebook, Google, and Amazon. They have become the root of a lot of evil.
OC'in beast
(21 items)
 
  
CPUMotherboardGraphicsGraphics
AMD FX-8350 (Vishera) Gigabyte GA-990XA AMD 285X (unreleased) AMD 285X (unreleased) 
RAMHard DriveHard DriveHard Drive
Mushkin Enhanced Blackline 8GB (996679) Western Digital WD10EALS 1TB Blue Corsair Force Series GT CSSD-F180GBGT-BK 180GB Intel 530 Series SSDSC2BW240A401 240GB 
Optical DriveCoolingCoolingCooling
Sony 20X Sata DVD-RW Scythe Mugen 2 rev B (3) Scythe Slip Stream SY1225SL12H-P Antec Tri-Cool 140mm 
CoolingCoolingOSMonitor
Antec Tri-Cool 120mm Scythe Ultra Kaze DFS123812-3000 Windows 7 Pro 64bit ASUS PA248Q 24.1" IPS 
KeyboardPowerCaseMouse
Coolermaster Storm QuickFire Stealth Cherry MX ... Antec Earthwatts EA-750 Antec 300 Logitech G5 
Mouse Pad
Steel Series Starcraft 2 Marine 
  hide details  
Reply
OC'in beast
(21 items)
 
  
CPUMotherboardGraphicsGraphics
AMD FX-8350 (Vishera) Gigabyte GA-990XA AMD 285X (unreleased) AMD 285X (unreleased) 
RAMHard DriveHard DriveHard Drive
Mushkin Enhanced Blackline 8GB (996679) Western Digital WD10EALS 1TB Blue Corsair Force Series GT CSSD-F180GBGT-BK 180GB Intel 530 Series SSDSC2BW240A401 240GB 
Optical DriveCoolingCoolingCooling
Sony 20X Sata DVD-RW Scythe Mugen 2 rev B (3) Scythe Slip Stream SY1225SL12H-P Antec Tri-Cool 140mm 
CoolingCoolingOSMonitor
Antec Tri-Cool 120mm Scythe Ultra Kaze DFS123812-3000 Windows 7 Pro 64bit ASUS PA248Q 24.1" IPS 
KeyboardPowerCaseMouse
Coolermaster Storm QuickFire Stealth Cherry MX ... Antec Earthwatts EA-750 Antec 300 Logitech G5 
Mouse Pad
Steel Series Starcraft 2 Marine 
  hide details  
Reply
post #14 of 16
Quote:
Originally Posted by spinFX View Post

https://arstechnica.com/security/2017/05/intel-patches-remote-code-execution-bug-that-lurked-in-cpus-for-10-years/

only seems to affect Server systems running AMT or other remote administration services. A scan was done and found 7000 vulnerable servers (running the remote management system and also have the ports enabled).

Apparently all intel chipset systems 10 years or younger are locally exploitable, so I guess if someone writes a virus that gets in and exploits the vulnerability, there's a worry... but you've got other issues if a virus is getting in.

Seems like a worry if you're running a big network with servers exposed to the internet running AMT or the other two services mentioned.

No it's not just servers. Almost all business laptops since Sandy Bridge are affected (Thinkpad Tx20/Xx20 and up, HP Elitebook 2x60/8x60 and later, Toshiba Portege/Tecra, ASUSPRO, Fujitsu, etc.), since vPro is active on most i5s and i7s on those machines for fleet management.

The fact that they don't have ports open to the WWW doesn't mean they aren't vulnerable...

One effective fix is running Coreboot or Libreboot if you can, which simply don't communicate with the TPM/AMT/IME. I did that on my T420 a while back, and it lets you get around other Intel stupidities as well, such as the dumb Sandy/Ivy whitelist (i.e. lets you run either generation CPU on either generation chipset).
Zen Master
(15 items)
 
Thinkpad T420
(16 items)
 
T420 Server
(15 items)
 
CPUMotherboardGraphicsRAM
R7 1700 @3.8 ASUS Prime B350M-A XFX R9 290 Double Dissipation Corsair Vengeance LPX 2x8GB DDR4 3000MHz CL15 @... 
Hard DriveHard DriveCoolingOS
Samsung 850 EVO 500 Crucial MX300 525GB Antec Kuhler 620 Windows 7 x64 
MonitorMonitorKeyboardPower
Samsung U28E590D AOC I2269Vw VicTsing I-500 Mechanical (Blue) Corsair TX850v2 
CaseMouseAudio
Silverstone Raven RV-03 Custom DIY JVC 2.0 Full Range HiFi through McCrypt DJ-20 m... 
CPUMotherboardGraphicsGraphics
i7 3630QM Thinkpad T420 QM67 pga988 HD4000 nVidia GTS450 eGPU  
RAMRAMHard DriveHard Drive
Mushkin D3S 1066 CL7 8GB Mushkin D3S 1066 CL7 8GB Kingston 128GB mPCIe SSD OCZ Vertex 4 120GB 
Hard DriveOSOSMonitor
Sandisk Ultra II 480GB Arch x86_64 Windows Server 2012R2 14" 1600x900 Matte 
PowerCaseOtherOther
90W Lenovo T420 AzureWave AW-NB037B EXP GDC Beast v8.0 ExpressCard 
CPUMotherboardGraphicsRAM
i7 2670qm Thinkpad T420 QM67 pga988 HD3000 Corsair ValueSelect DDR3-1333 8G 
RAMHard DriveHard DriveHard Drive
Kingston ValueRam DDR3L-1600 8G Lenovo OEM (WD Black) 320GB Seagate 500GB Seagate Desktop ST2000DM001 
Hard DriveOSMonitorPower
Seagate 1TB Proxmox 4.1 14" 1600x900 Matte 90W Lenovo 
CaseOtherOther
T420 Fantec QB-35US3-6G DeLock eSata Expresscard 
  hide details  
Reply
Zen Master
(15 items)
 
Thinkpad T420
(16 items)
 
T420 Server
(15 items)
 
CPUMotherboardGraphicsRAM
R7 1700 @3.8 ASUS Prime B350M-A XFX R9 290 Double Dissipation Corsair Vengeance LPX 2x8GB DDR4 3000MHz CL15 @... 
Hard DriveHard DriveCoolingOS
Samsung 850 EVO 500 Crucial MX300 525GB Antec Kuhler 620 Windows 7 x64 
MonitorMonitorKeyboardPower
Samsung U28E590D AOC I2269Vw VicTsing I-500 Mechanical (Blue) Corsair TX850v2 
CaseMouseAudio
Silverstone Raven RV-03 Custom DIY JVC 2.0 Full Range HiFi through McCrypt DJ-20 m... 
CPUMotherboardGraphicsGraphics
i7 3630QM Thinkpad T420 QM67 pga988 HD4000 nVidia GTS450 eGPU  
RAMRAMHard DriveHard Drive
Mushkin D3S 1066 CL7 8GB Mushkin D3S 1066 CL7 8GB Kingston 128GB mPCIe SSD OCZ Vertex 4 120GB 
Hard DriveOSOSMonitor
Sandisk Ultra II 480GB Arch x86_64 Windows Server 2012R2 14" 1600x900 Matte 
PowerCaseOtherOther
90W Lenovo T420 AzureWave AW-NB037B EXP GDC Beast v8.0 ExpressCard 
CPUMotherboardGraphicsRAM
i7 2670qm Thinkpad T420 QM67 pga988 HD3000 Corsair ValueSelect DDR3-1333 8G 
RAMHard DriveHard DriveHard Drive
Kingston ValueRam DDR3L-1600 8G Lenovo OEM (WD Black) 320GB Seagate 500GB Seagate Desktop ST2000DM001 
Hard DriveOSMonitorPower
Seagate 1TB Proxmox 4.1 14" 1600x900 Matte 90W Lenovo 
CaseOtherOther
T420 Fantec QB-35US3-6G DeLock eSata Expresscard 
  hide details  
Reply
post #15 of 16
Quote:
Originally Posted by Imouto View Post

Because it is vPro exclusive.

so my core i5 2400 doesn't have v-pro?

oh wait

http://ark.intel.com/products/52207/Intel-Core-i5-2400-Processor-6M-Cache-up-to-3_40-GHz

it does.
Gaming Rig
(15 items)
 
Sons Rig
(11 items)
 
File Server
(13 items)
 
CPUMotherboardGraphicsGraphics
Core i7 4790K ASUS Z97-WS Gigabyte GeForce GTX 980 Gigabyte GeForce GTX 980 
RAMHard DriveCoolingOS
16 Gb's Mushkin DDR3 @ 1600 MHz Crucial M500 SSD 240gb Coolit ECO C240 Windows 7 Ultimate 
MonitorMonitorPowerCase
ASUS PB287Q 4K Monitor HTC Vive Coolermaster Silent Pro M 1000W Rosewill Blackhawk Ultra 
MouseMouse PadAudio
Razer Deathadder 2013 Steelseries Qck Mass Super Thick Cloth Mouse Pad Genius SW-G2.1 1250 4PC Gaming Speakers 
CPUMotherboardGraphicsGraphics
Core i7 3770k Asus P8Z68 Deluxe Galaxy Geforce GTX 780 Galaxy Geforce GTX 780 
RAMHard DriveCoolingOS
16 Gb's G.Skill DDR3 1866 Crucial M500 SSD 240Gb Coolit ECO C240 Windows 7 Ultimate 
MonitorPowerCase
Benq G2420HD Coolermaster Silent Pro 1000 Watt Deepcool Kendomen 
CPUMotherboardRAMHard Drive
Core i3 2120 Supermicro X9SCM-F 4 Gb Kingston 1600mhz DDR3 ECC 12 Segate 2tb drives (RAID 6) 
Hard DriveHard DriveOSPower
ADATA SP600 SSD 24 Toshiba DT01ACA200 drives (2 RAID 6's) Windows 7 Ultimate 64 bit. OCZ ZT750 Supermicro PWS-665-PQ 
CaseOtherOtherOther
Norco 4020 and Norco 4224 LSI 9260-4i Raid Card Intel RES2SV240 20 port Expander. HP SAS 24 por... Voltaire 410Ex Hca Infiniband HBA 
  hide details  
Reply
Gaming Rig
(15 items)
 
Sons Rig
(11 items)
 
File Server
(13 items)
 
CPUMotherboardGraphicsGraphics
Core i7 4790K ASUS Z97-WS Gigabyte GeForce GTX 980 Gigabyte GeForce GTX 980 
RAMHard DriveCoolingOS
16 Gb's Mushkin DDR3 @ 1600 MHz Crucial M500 SSD 240gb Coolit ECO C240 Windows 7 Ultimate 
MonitorMonitorPowerCase
ASUS PB287Q 4K Monitor HTC Vive Coolermaster Silent Pro M 1000W Rosewill Blackhawk Ultra 
MouseMouse PadAudio
Razer Deathadder 2013 Steelseries Qck Mass Super Thick Cloth Mouse Pad Genius SW-G2.1 1250 4PC Gaming Speakers 
CPUMotherboardGraphicsGraphics
Core i7 3770k Asus P8Z68 Deluxe Galaxy Geforce GTX 780 Galaxy Geforce GTX 780 
RAMHard DriveCoolingOS
16 Gb's G.Skill DDR3 1866 Crucial M500 SSD 240Gb Coolit ECO C240 Windows 7 Ultimate 
MonitorPowerCase
Benq G2420HD Coolermaster Silent Pro 1000 Watt Deepcool Kendomen 
CPUMotherboardRAMHard Drive
Core i3 2120 Supermicro X9SCM-F 4 Gb Kingston 1600mhz DDR3 ECC 12 Segate 2tb drives (RAID 6) 
Hard DriveHard DriveOSPower
ADATA SP600 SSD 24 Toshiba DT01ACA200 drives (2 RAID 6's) Windows 7 Ultimate 64 bit. OCZ ZT750 Supermicro PWS-665-PQ 
CaseOtherOtherOther
Norco 4020 and Norco 4224 LSI 9260-4i Raid Card Intel RES2SV240 20 port Expander. HP SAS 24 por... Voltaire 410Ex Hca Infiniband HBA 
  hide details  
Reply
post #16 of 16
Looks like I'm good on the main rig with the 5930K, but my FreeNas server has E3-1270 v5 with vPro. frown.gif
Black Mesa
(18 items)
 
  
CPUMotherboardGraphicsRAM
i7 5930K @ 4.4 GHz 1.275v Asus Rampage V Extreme ASUS Strix 1080 Ti @ 2050 / 11750 4x4GB DDR4 2800Hz Corsair Dominator Platinum 
Hard DriveHard DriveCoolingOS
Samsung 950 Pro M.2 NVMe 512GB 2x OCZ Vertex 4 256GB NZXT Kraken X62 /w 4x Noctua NF-A14 PWM Windows 10 Pro x64 
MonitorMonitorKeyboardPower
Asus VG248QE 144Hz 1080p BenQ XL2410T 120Hz 1080p Corsair K70 RGB MX Brown Seasonic Prime 750w Titanium 
CaseMouseMouse PadAudio
NZXT H440 NE Black /w Window Logitech G500s Corsair MM200 XL Asus Essence One 
AudioAudio
Philips Fidelio X1 AKG K7XX 
  hide details  
Reply
Black Mesa
(18 items)
 
  
CPUMotherboardGraphicsRAM
i7 5930K @ 4.4 GHz 1.275v Asus Rampage V Extreme ASUS Strix 1080 Ti @ 2050 / 11750 4x4GB DDR4 2800Hz Corsair Dominator Platinum 
Hard DriveHard DriveCoolingOS
Samsung 950 Pro M.2 NVMe 512GB 2x OCZ Vertex 4 256GB NZXT Kraken X62 /w 4x Noctua NF-A14 PWM Windows 10 Pro x64 
MonitorMonitorKeyboardPower
Asus VG248QE 144Hz 1080p BenQ XL2410T 120Hz 1080p Corsair K70 RGB MX Brown Seasonic Prime 750w Titanium 
CaseMouseMouse PadAudio
NZXT H440 NE Black /w Window Logitech G500s Corsair MM200 XL Asus Essence One 
AudioAudio
Philips Fidelio X1 AKG K7XX 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Hardware News
Overclock.net › Forums › Industry News › Hardware News › [Phoronix] Intel Confirms Vulnerability In Intel AMT/ME (Management Engine)