Adding to this discussion: as of May first this year Intel finally announced the patch for AMT and other firmware security vulnerabilities that has been present in all Intel cpu/mobo management firmware since 2006. I have yet to receive any notification of patch availability from Dell, HP, or Intel, even though I still manage a few enterprise networks. BIOS may be BIOS but processor management firmware is a whole 'nother beast. The lag is reported officially as 9 years but is indeed 11 years on some higher end HPs as far as I can tell. I personally don't think the patch appeared except for certain newer AMT versions.
TC
I forgot. Get the Linux repair tools here:
https://github.com/intel/INTEL-SA-00075-...tion-Tools
Adding again to this post: OEM support is spotty in my opinion at Dell and HP with several missing OEM machines that I know of personally and I have been to both sites. Finally I don't think the patch will prevent an "in the room exploit" via the MEBx recovery tools but we will just have to wait and see.
TC
I forgot. Get the Linux repair tools here:
https://github.com/intel/INTEL-SA-00075-...tion-Tools
Adding again to this post: OEM support is spotty in my opinion at Dell and HP with several missing OEM machines that I know of personally and I have been to both sites. Finally I don't think the patch will prevent an "in the room exploit" via the MEBx recovery tools but we will just have to wait and see.
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.