Top all-time · #5330
embedi.com
Company blog · embedi.com/blogsecurity
embedi.com is the company blog at embedi.com, writing about security. Since 2017, 15 different Hacker News readers have linked it 15 times, most often “Skeleton in the closet. MS Office vulnerability you didn’t know about”. No feed was found, so read it on the site itself.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
Embedi is a security research firm whose posts cover Intel Management Engine, Boot Guard and the CVE-2017-5689 flaw. Commenters link its pages as sources, and none of the comments judge the writing itself.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Skeleton in the closet. MS Office vulnerability you didn’t know about3 people · 3 mentions · first linked 2017-11-14
- Intel AMT vulnerability: Silent Bob is Silent [pdf]2 people · 2 mentions · first linked 2017-05-05
- Enlarge your botnet with: top D-Link routers2 people · 2 mentions · first linked 2017-09-14
- Bypassing Intel Boot Guard2 people · 2 mentions · first linked 2017-10-06
What Hacker News says?
I used it to look into Gigabytes response to Intel SA 00075 described in https://embedi.com/files/presentations/BH-Las-Vegas-2017-Int... . before: http://download.gigabyte.us/FileList/BIOS/brix_bios_bsi5ha(a... after: http://download.gigabyte.us/FileList/BIOS/brix_bios_bsi5ha(a... You can see that there is an extra function call added that tests for response.length. Given the easy availability of the assembler dump…
Comment linking /files/presentations/BH-Las-Vegas-2017-Intel-AMT-Stealth-Breakthrough-presentation.pdf
on “Disabling the Intel Management Engine”Submitted Bypassing Intel Boot Guard as a story · 76 points
HN discussioninterestingly enough some implementations are broken because of buggy UEFI (AMI) https://embedi.com/blog/bypassing-intel-boot-guard
Comment linking /blog/bypassing-intel-boot-guard
on “Disabling the Intel Management Engine”Submitted Intel AMT vulnerability: Silent Bob is Silent [pdf] as a story · 73 points
HN discussionAs far as I know, Embedi and not SemiAccurate found and reported the issue. https://www.embedi.com/files/white-papers/Silent-Bob-is-Sile... > An authentication bypass vulnerability, which will be later known as CVE-2017-5689, was originally discovered in mid-February of 2017 while doing side-research on the internals of Intel ME firmware. The first objects of interest were network services and protocols.
Comment linking /files/white-papers/Silent-Bob-is-Silent.pdf
on “The hijacking flaw that lurked in Intel chips is worse than anyone thought”Submitted Skeleton in the closet. MS Office vulnerability you didn’t know about as a story · 3 points
HN discussionThat comment id great, but where is the source? I can't find any technical details following links in the article. Moreover, Embedi team who found the vulnerability says[0] on their site: "Intel representatives have asked Embedi to hold off on disclosing any technical details regarding this issue until further notice." Or is the commenter just guessing? 0. https://www.embedi.com/news/mythbusters-cve-2017-5689
Comment linking /news/mythbusters-cve-2017-5689
on “The hijacking flaw that lurked in Intel chips is worse than anyone thought”Submitted Enlarge your botnet with top D-Link routers as a story · 3 points
HN discussionSubmitted Enlarge your botnet with: top D-Link routers as a story · 3 points
HN discussionSubmitted Cisco Smart Install Remote Code Execution as a story · 2 points
HN discussionSubmitted Skeleton in the closet. MS Office vulnerability you didn’t know about as a story · 2 points
HN discussionSubmitted First glance on OS VRP by Huawei as a story · 1 points
HN discussionSubmitted Skeleton in the closet. MS Office vulnerability you didn’t know about as a story · 1 points
HN discussionSubmitted The Adventure of the Final Intel AMT Problem as a story · 1 points
HN discussionSubmitted Intel AMT some new stealth-vector attacks and good old vulnerabilities as a story · 1 points
HN discussion
