Flaws found in Intel Management Engine (ME), TXE and SPS

RingTailCoon · 22 Nov 2017

lx07 said:

Pretty much, yeah :)

Thanks for the friendreq btw, accepted! :)

Rose W · 22 Nov 2017

Joanne said:

Does this help?
PRIME Z270-K BIOS & FIRMWARE| Motherboards | ASUS USA

That link was perfect. Then I discovered it is a .rar file and the new Firefox Quantum appears to choke on .rar files. It only displayed the raw contents (graphics etc) no download. I turned to Chrome and in fact the tool was available and the title visible in the Chrome display.
NOW I have to figure out what to do with this update since the files that appear to deal with the updating have an October date.
I couldn't find a 'how to', or a manual describing the routine
I think I'll do a Macrium Reflect session before launching into this.

Cliff S · 22 Nov 2017

Rose W said:

That link was perfect. Then I discovered it is a .rar file and the new Firefox Quantum appears to choke on .rar files. It only displayed the raw contents (graphics etc) no download. I turned to Chrome and in fact the tool was available and the title visible in the Chrome display.
NOW I have to figure out what to do with this update since the files that appear to deal with the updating have an October date.
I couldn't find a 'how to', or a manual describing the routine
I think I'll do a Macrium Reflect session before launching into this.

If you don't have this utility, you might want to install it, and use that:

Flaws found in Intel Management Engine (ME), TXE and SPS-image.png

To open .rar files use 7Zip

lx07 · 22 Nov 2017

Rose W said:

That link was perfect. Then I discovered it is a .rar file

.rar is a propriorory compression format for WinRAR. You can either buy WinRAR or (what I'd suggest) download 7-zip.

7-zip is free and will open most all compression formats including .rar.

The link is here http://www.7-zip.org/ and it unzips the above file fine like this:

Flaws found in Intel Management Engine (ME), TXE and SPS-capture.png

Rose W · 22 Nov 2017

I use 7 zip. In fact once Chrome downloaded the actual .rar file the 7zip extracted it and I could examine the contents. It was Firefox 57 (Quantum) that wasn't doing an obvious download. It only opened the contents of the file

Thanks for all this infol

lx07 · 22 Nov 2017

Rose W said:

once Chrome downloaded the actual .rar file the 7zip extracted it and I could examine the contents

You can (if you want) make a self extracting file. So you can compress something with 7-zip (or Win-RAR or WinZip) and put the bit of code required to decompress it in the file your sender receives. When the person downloads it it decompresses using that bit of code.

Not many people do that any more as almost everyone has broadband (or at least 3G/4G) but it still exists even if most people don't care about compression.

I'll get my coat now.

f14tomcat · 22 Nov 2017

FWIW:

Intel ME explained in basically newbie terms, but good info.

Intel Management Engine, Explained: The Tiny Computer Inside Your CPU

Geneo · 22 Nov 2017

Brink said:

Yep, the tool is a standalone that can just be deleted when done with it. :)

My report:

Attachment 164973

Earlier than 6th gen platforms are not affected.

AMDMan2016 · 22 Nov 2017

No idea when my Asus G11CD desktop will have update available, so far nothing on Asus site lol, guess will just have to wait patiently lol

Winuser · 22 Nov 2017

AMDMan2016 said:

No idea when my Asus G11CD desktop will have update available, so far nothing on Asus site lol, guess will just have to wait patiently lol

Nothing we can do but wait. I have checked two desktops and one laptop and all three are vulnerable and no bios updates available. I still have a desktop and a laptop to check.