Slashdot Mirror


Intel Patches Flaws In Trusted Execution Tech

An anonymous reader writes "Joanna Rutkowska's company Invisible Things Lab has issued the results of their research into flaws in Intel's Trusted Execution Technology (TXT), whose function is to provide a mechanism for safe loading of system software and to protect sensitive files. ITL describes how flaws in TXT can be used to compromise the integrity of a software loaded via an Intel TXT-based loader in a generic way, fully circumventing any protection TXT is supposed to provide. The attack exploits an implementation error in the so-called SINIT Authenticated Code modules and that could potentially allow a malicious attacker to elevate their privileges. Intel has released a patch for the affected chipsets, which include the Q35, GM45, PM45 Express, Q45, and Q43 Express." Here are ITL's press release (PDF) and Intel's advisory.

4 of 84 comments (clear)

  1. WTF are you doing? by Anonymous Coward · · Score: -1, Troll

    Wimmins aren't allowed on teh intranetz. Get back in the kitchen where you belong and let the men handle this.

    By the way, I don't live under the fridge, you insensitive dyke! X_X

    1. Re:WTF are you doing? by Anonymous Coward · · Score: -1, Troll

      there is probably at least one person jacking off to thoughts of your sweet pussy right now.

  2. Re:TPMs and related tech by Anonymous Coward · · Score: -1, Troll

    Or more precisely; If Joanna has access to the hardware they are screwed. :-)

    What, you mean a woman is actually doing something useful involving computers? She must be fat, old, ugly, or all three.

    Next thing ya know, you're going to tell me that niggers invented a new technology.

  3. Re:Readme.TXT by Darkness404 · · Score: 0, Troll

    Well, we can't expect Windows to ever implement anything better than half-baked security now can we? ;)

    --
    Taxation is legalized theft, no more, no less.