undefined | Better HN

0 pointsboring_twenties5y ago0 comments

The part that can't be removed still has had critical security vulnerabilities, though.

0 comments

But how would anyone interact with that part?

If it has no NIC access and the OS doesn't have access to it because it's not hanging on PCIe anymore, so if it's only there for system bringup, it's essentially sealed off from the world.

boring_twentiesOP5y ago

It might require physical access, as with https://www.intel.com/content/www/us/en/security-center/advi... but that's still pretty bad as it allows for rootkits completely undetectable from the OS environment.

j / k navigate · click thread line to collapse

0 comments

floatboth5y ago

But how would anyone interact with that part?

If it has no NIC access and the OS doesn't have access to it because it's not hanging on PCIe anymore, so if it's only there for system bringup, it's essentially sealed off from the world.

boring_twentiesOP5y ago

j / k navigate · click thread line to collapse