New answers tagged attacks
6
What is Plundervolt?
Plundervolt is a vulnerability in Intel CPUs. These CPUs allow users to use privileged software interfaces to undervolt their CPU. Undervolting is the process of supplying the CPU with less power than specified, usually in order to conserve power. In this case, undervolting is used to induce faults into calculations.
By doing so, ...
2
Since in your specific setup the home office computers are either connected with a full VPN tunnel to the company or have full direct access to the internet (i.e. VPN off), the main point of the VPN is obviously not to protect the computer itself. With such a setup it is still possible that an attacker can compromise the system and establish a permanent ...
4
In general: an absolute path name is more clear than a relative one. It is not open to interpretation based on the context like a relative path name is. The actual meaning of a relative name depends on the current directory, on environment variables (like PATH) etc, while an absolute path name most times means the same thing.
Therefore an absolute path name ...
3
Yes, it is bypassed
According to the CVE-2018-3659 and CVE-2018-3643 whitepaper, the Intel® Converged Security Mangement Engine's System on a Chip has four different DFx (Design For testability, debug, security and validation) states:
Green (DFx locked) - normal state
Orange (DFx unlocked) - allows to debug OEM IPs
Red (DFx unlocked) - allows Intel to debug ...
Top 50 recent answers are included
