There has been quite a bit of discussion recently regarding the use of a Management Engine (ME), or the code that exists within a CPU but is inaccessible to the user of the computer using that CPU. To quote from the introduction of this PDF:
Intel Management Engine (Intel ME) is a proprietary technology that consists of a microcontroller integrated into the Platform Controller Hub (PCH) chip and a set of built-in peripherals. The PCH carries almost all communication between the processor and external devices. Therefore, Intel ME has access to almost all data on the computer. The ability to execute third-party code on Intel ME would allow for a complete compromise of the platform.
Several people, including some from within our own community, have expressed concern that any weaknesses in the ME code would provide another attack surface and, guess what? It has been done! This PDF explains just how some people have managed to achieve the hackers dream and our worst nightmare, and details some research on this subject. It even goes so far as to explain how to run unsigned code in the ME, albeit under a limited set of circumstances - thus giving a hacker total control over the system. However, as this is only the beginning of such research in relative terms it does not bode well for the future. Finding the flaw is the first step, learning how to exploit is the next.
The PDF is, by necessity, quite technical but will be understandable by a significant proportion of our community. The report claims that the following CPUs are susceptible to the attacks detailed in it:
(Score: 2) by Justin Case on Saturday December 30 2017, @07:53PM (1 child)
Imagine that between your steering wheel and the actual car there is a second person. In truth it is this someone else who drives your car; you just tell the chauffeur where you want to go and he goes there. He also remembers everywhere you go, so he knows about your favorite strip clubs and "massage" places.
Now imagine your wife gets access to the chauffeur and with some hand-wavy incantation she can make him spill his guts. Seeing a problem yet?
(Score: 0) by Anonymous Coward on Saturday December 30 2017, @08:17PM
> and with some hand-wavy incantation...
Come on, based on your sig, we know what you are really thinking -- the wife is offering to put out, or at least teasing that she might be willing.