Bit9

Skip Navigation
 

Enterprise Application Whitelisting

Current Articles | RSS Feed RSS Feed

Attacking Intel® Trusted Execution Technology

Posted by Mario Vuksan on Sun, Feb 22, 2009
  | Share on Twitter Twitter | Buzz This  Google Buzz | Submit to Digg digg it |  Share on LinkedIn LinkedIn 

New Centrino platform will be all of the rage at the upcoming Black Hat 2009 conference in Washington DC this February. Joanna Rutkowska and Rafal Wojtczuk will evaluate attacking scenarios against Intel's Trusted Execution Technology.

Intel's efforts to bring a fully features Web Server directly into the Motherboard has been discussed on numerous boards and has been highlighted by Ivan Krstic in his keynote at the First Conference in Vancouver earlier this year. Subverting permanently one's motherboard may end up being the ultimate acts of subversion.

So what's all the rage. You can read on Intel's pages:

"3. Intel AMT Platform Security

While one of the key usage models for Intel AMT is that it allows management applications to access client computers when they are in a powered-off state, the radio in a wireless network interface card (NIC) is typically not operational in power states other than S0. Thus, no wireless Intel AMT functionality is available when laptops are powered down or in low-power modes (sleep, hibernate, etc.).

Going one better: "
Intel AMT Releases 2.5 and 3.0 are concurrent releases, with Release 2.5 supporting wireless capabilities on mobile platforms and Release 3.0 supporting wired PCs."

You may not need a physical access anymore, but rather wardrive through a neighborhood or just take a public transportation to attack all those laptops that do not even need to be powered on.

Accompanying the Centrino Duo and Centrino Pro release were announcements of new notebook computers from Hewlett-Packard, Gateway, Fujitsu, Sony, Toshiba, Acer, Lenovo, Dell, and others. Several hundred new notebook models with the updated Centrino platforms are expected to be released and make this technology ubiqitous.

COMMENTS

wow a post from the future :)

posted @ Thursday, January 08, 2009 3:02 AM by hans


Post Comment
Name
 *
Email
 *
Website (optional)
Comment
 *

Allowed tags: <a> link, <b> bold, <i> italics

Subscribe by Email

Your email: