On Mon, 18 May 2015, Stefan Sperling wrote:
OTOH, many laptops nowadays ship with Intel AMT and suffer the same issue
or worse. Yet we still run on them. Current AMT versions have an attack
surface that dwarfs ASF's. Perhaps this is a lost cause and we'll simply
have to accept that a lot of hardware is insecure by design.
(I have borrowed another thread from tech@ for start this one.)
This brings other questions. Are standalone PCIe cards safe from this?
Many specification documents mention that they support at least ASF too.
Don't they contain the same firmware (or most of it) as their onboard
variants?
What PCIe gigabit ethernet cards that are supported in OpenBSD are
considered secure? Does anyone have a recommendation?
Thank you.
Regards,
David
