Researchers figured out how to disable the Intel ME controller on Intel chipsets

Discussion in 'privacy technology' started by Stefan Froberg, Aug 30, 2017.

Thread Status:
Not open for further replies.
  1. Stefan Froberg

    Stefan Froberg Registered Member

    Joined:
    Jul 30, 2014
    Posts:
    747
    You still remember when **** hit the fan in this may and the AMT (Active Management Technology) blank password bug was found out?

    Well now, it seems that the whole **** Intel ME backdoor that runs the AMT can finally be disabled.

    https://www.helpnetsecurity.com/2017/08/29/disable-intel-me/

    And this was *very* interesting:

    "They are planning to release a lot of their findings in the coming days, but in the meantime they shared how Intel ME can be disabled altogether and permanently, thanks to an undocumented mode that had been implemented after the US government requested the option."

    And Intel says it does not design backdoors? Yeah..riiiiiight

    In meanwhile let's take a look how many servers that expose AMT to public is still out there:
    https://www.shodan.io/search?query=http intel active management

    Hmmm...3707 servers still exposed to public but luckily most of them have at least patched their systems (with quick, 7 min browsing managed to take control of only 5 of them).

    Was lot worse. One time there were over 5000 of them public and several unpatched ....
    (so many in fact that I lost interest of hijacking and creating admin accounts for myself and went to my other stuff)
     
  2. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    98,118
    Location:
    U.S.A.
    Topic Already Posted. Please Search First. Thanks!
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.