Lowyat.NET: Latest topics by JromeTJ

Have you guys patched yet?

JromeTJ — Mon, 27 Nov 2017 17:04:52 +0800

Intel today admitted its Management Engine (ME), Server Platform Services (SPS), and Trusted Execution Engine (TXE) are vulnerable to multiple worrying security flaws, based on the findings of external security experts.

The firmware-level bugs allow logged-in administrators, and malicious or hijacked high-privilege processes, to run code beneath the operating system to spy on or meddle with the computer completely out of sight of other users and admins. The holes can also be exploited by network administrators, or people masquerading as admins, to remotely infect machines with spyware and invisible rootkits, potentially.

Meanwhile, logged-in users, or malicious or commandeered applications, can leverage the security weaknesses to extract confidential and protected information from the computer's memory, potentially giving miscreants sensitive data – such as passwords or cryptographic keys – to kick off other attacks. This is especially bad news on servers and other shared machines.

In short, a huge amount of Intel silicon is secretly running code that is buggy and exploitable by attackers and malware to fully and silently compromise computers. The processor chipsets affected by the flaws are as follows:

6th, 7th and 8th Generation Intel Core processors
Intel Xeon E3-1200 v5 and v6 processors
Intel Xeon Scalable processors
Intel Xeon W processors
Intel Atom C3000 processors
Apollo Lake Intel Atom E3900 series
Apollo Lake Intel Pentiums
Celeron N and J series processors
Intel's Management Engine, at the heart of today's disclosures, is a computer within your computer. It is Chipzilla's much maligned coprocessor at the center of its vPro suite of features, and it is present in various chip families. It has been assailed as a "backdoor" – a term Intel emphatically rejects – and it is a mechanism targeted by researchers at UK-based Positive Technologies, who are set to reveal in detail new ways to exploit the ME next month.

The Management Engine is a barely documented black box. It has its own CPU and its own operating system – recently, an x86 Quark core and MINIX – that has complete control over the machine, and it functions below and out of sight of the installed operating system and any hypervisors or antivirus tools present.

It is designed to allow network administrators to remotely or locally log into a server or workstation, and fix up any errors, reinstall the OS, take over the desktop, and so on, which is handy if the box is so messed up it can't even boot properly.

The ME runs closed-source remote-administration software to do this, and this code contains bugs – like all programs – except these bugs allow hackers to wield incredible power over a machine. The ME can be potentially abused to install rootkits and other forms of spyware that silently snoop on users, steal information, or tamper with files.

SPS is based on ME, and allows you to remotely configure Intel-powered servers over the network. TXE is Intel's hardware authenticity technology. Previously, the AMT suite of tools, again running on ME, could be bypassed with an empty credential string.

Today, Intel has gone public with more issues in its firmware. It revealed it "has identified several security vulnerabilities that could potentially place impacted platforms at risk" following an audit of its internal source code:

In response to issues identified by external researchers, Intel has performed an in-depth comprehensive security review of our Intel Management Engine (ME), Intel Server Platform Services (SPS), and Intel Trusted Execution Engine (TXE) with the objective of enhancing firmware resilience.

The flaws, according to Intel, could allow an attacker to impersonate the ME, SPS or TXE mechanisms, thereby invalidating local security features; "load and execute arbitrary code outside the visibility of the user and operating system"; and crash affected systems. The severity of the vulnerabilities is mitigated by the fact that most of them require local access, either as an administrator or less privileged user; the rest require you to access the management features as an authenticated sysadmin.

Intel 5th Generation Core processor with vPro
Intel ME controller chip has secret kill switch
READ MORE
But as Google security researcher Matthew Garrett pointed out in the past hour or so, the aforementioned AMT flaw, if not patched, could allow remote exploitation.

In other words, if a server or other system with the AMT hole hasn't been updated to kill off that vulnerabilities, these newly disclosed holes will allow anyone on the network to potentially log in and execute malicious code within the powerful ME coprocessor.

"The ME compromise presumably gives you everything the AMT compromise gives you, plus more," said Garrett via Twitter. "If you compromise the ME kernel, you compromise everything on the ME. That includes AMT, but it also includes PTT."

He explained, "PTT is Intel's 'Run a TPM in software on the ME' feature. If you're using PTT and someone compromises your ME, the TPM is no longer trustworthy. That probably means your Bitlocker keys are compromised, but it also means all your remote attestation credentials are toast."

Garrett said if an exploit allows unsigned data to be installed and interpreted by the ME, an attacker could effectively trigger the reinfection of malware after every ME reboot. Were that to happen, the only way to fix things would be to reflash the hardware by hand. At that point, he said, it would probably be cheaper just to get new hardware.

Better patch before your personal information gets exploited without you noticing. Its under your OS so no software can actually detect data passthrough.

Show off photography skills

JromeTJ — Fri, 24 Nov 2017 17:11:30 +0800

Jom share your photos and your best composition.

Need inspiration.

lai lai.

Chinese new year air fare so (censored) expensive

JromeTJ — Fri, 24 Nov 2017 08:24:19 +0800

Wanna go back to hometown in Ipoh for Chinese new year from SG cause SG is like a dead town during CNY.

Seriously. Like zero shops open. Not even grocery stores and all you have left is McD and KFC.

But the airfare is frigging RM9xx++ one way lol
And i've been checking since April for it. no price drop or change. Its like they know..

Best Ultraboost colorway

JromeTJ — Wed, 22 Nov 2017 16:40:00 +0800

Birthday coming up. Planning to get myself an Ultraboost

*PS. cause no one wants to buy one for me

So which colorway should i get? Aside from SNS and Y3 pureboost. Cause those are really not worth the resell honestly and i'm planning to wear it from time to time.

Or should i wait for the 4.0?

Mirrorless camera

JromeTJ — Wed, 22 Nov 2017 11:29:07 +0800

Planning to get a mirrorless camera.

Was thinking of Fujifilm XT-20 and is micro 4/3 really obsolete now?

Any other suggestions beside that camera?

Cheers!

Have you come a point in life..

JromeTJ — Tue, 21 Nov 2017 18:06:07 +0800

Have you ever come a point in life when everything you want, you already have and everything that you dream you could have is too far away for now so you won't think about it 1st?

1st world problems.

AAA watches

JromeTJ — Sat, 18 Nov 2017 09:53:42 +0800

Has anyone purchased AAA watches before?

Is it good and reliable?

Has anyone got called out by enthusiasts before?

Really curious how good are AAA considering that you're actually still pay a couple hundred for them.

House or marriage?

JromeTJ — Wed, 01 Nov 2017 18:22:03 +0800

Which one comes 1st?

House or marriage?

I'm not like others ada mak bapak sapot.

Kete downpayment also need to bayar on my own. Which one should come 1st?

Thoughts on girls wearing pinafore

JromeTJ — Wed, 01 Nov 2017 17:56:41 +0800

Baju kurung or Pinafore?

What are your thoughts?

Very open gril or conservative gril?

JromeTJ — Mon, 08 Aug 2016 12:27:10 +0800

You enjoy socializing with really open gril. (As in can potentially be FB ) type. Or more conservative (Wifey material)?

Assuming both type of gril is hot.

*klu muka mcm sial sape mau..

Race based Politik party or?

JromeTJ — Fri, 05 Aug 2016 12:28:12 +0800

I find that all current political parties are mostly based on race or dominated by certain race. I feel that mcm tak maju liddat. Kan sume satu kampong. Why wanna "itu aku mia itu you mia?" 59 years d still mcm tu. Not boring ke? So asking you guys is race really that important?

gundam.my

JromeTJ — Sat, 03 Jan 2015 13:43:58 +0800

Just wanted to know has anyone ever bought their Gundam kits from this website?

Gundam.my

is it reliable? Will it cheaper than buying from retail?

[WTS] 100% Original Genuine Pineng Powerbank!

JromeTJ — Tue, 11 Mar 2014 22:01:09 +0800

REFER TO THIS THREAD!!

WTS 100% Genuine Pineng Powerbank

[WTS]100% ORIGINAL GENUINE Pineng Powerbank!

JromeTJ — Tue, 11 Mar 2014 21:46:01 +0800

100% ORIGINAL PINENG POWERBANK!!!

Check out our Facebook page and our satisfied customers!!

CLICK HERE- V-Technology Enterprise
-1 YEAR EXCHANGE WARRANTY
-CHECK THE ORIGINAL SERIAL ONLINE

check on pineng website. Pineng.cn
Warranty card and Verification Code will be given as proof of Authenticity!!

WHY YOU SHOULD BUY FROM ME??

1) My Powerbanks are 100% guaranteed original. Verification code can be checked online

2) I have sold many on Facebook before. Check on the link - CLICK HERE- V-Technology Enterprise

3) We don't keep old stocks. Old stocks tend to lose charging and discharging capabilities as some stocks are kept for ages. *like those they sell real cheap*

4) Ask for better price if this isn't compelling enough!! I can also do a few discounts.

[attachmentid=3886624]

PM for BEST PRICE!! All price listed including postage anywhere in Peninsular!

[attachmentid=3886626]
a) PN968 10000mAh~RM95

[attachmentid=3886627]
b) PN910 11200mAh FULL SET WITH INTERCONNECTOR!! ~ RM120

[attachmentid=3886628]
c) PN912 16800mAh FULL SET WITH INTERCONNECTOR!! ~ RM155

[attachmentid=3886629]
d) PN913 10000mAh ~RM95

[attachmentid=3886630]
e) PN938 10000mAh ~RM100

[attachmentid=3886631]
f) PN929 15000mAh ~RM130

Post on thread for other models of Pineng Brand Powerbank

P/s:This warranty does not apply to:
Damage caused by accident, abuse, misuse, water, flood, fire or other acts of nature or external causes
ORIGINAL PINENG BRAND POWERBANK!!!

COMPATIBLE WITH:iPad / iPhone / iPod / GPS / PDA / PSP / Camera / Mobile phone (HTC, Apple iPhones, Samsung, Motorola, Toshiba, Panasonic, Blackberry, Nokia, Sony-Ericsson, LG, Palm & etc).

PRODUCT FEATURES :
1) LCD Display : Digital LCD display indicates the charging and discharging status and residual power, experience the intelligent life.

2) Dual USB Output :With dual USB output interfaces, mobile phones/Ipad can be charged at the same time, more efficiently.

3) Adopting Japan Imported-Technology :Adopt Japanese high efficient boosting technique and battery protection IC. Built-in intelligent voltage recognition chip automatically detects the voltage and current of different kinds of digital products.

4) Protective Design :Prevent from over charging, over discharging and short circuit, and also high temperature protective design.

5) High Compatibility :Compatible with 95% mobile phones in the market

Money back if found not genuine..

CHEAP CHEAP!!

[WTS] 100% ORIGINAL GENUINE Pineng Powerbank!

JromeTJ — Tue, 11 Mar 2014 21:28:16 +0800

100% ORIGINAL PINENG POWERBANK!!!
Check out our Facebook page and our satisfied customers!!

CLICK HERE- V-Technology Enterprise
-1 YEAR EXCHANGE WARRANTY
-CHECK THE ORIGINAL SERIAL ONLINE

check on pineng website. Pineng.cn
Warranty card and Verification Code will be given as proof of Authenticity!!

WHY YOU SHOULD BUY FROM ME??

1) My Powerbanks are 100% guaranteed original. Verification code can be checked online

2) I have sold many on Facebook before. Check on the link - CLICK HERE- V-Technology Enterprise

3) We don't keep old stocks. Old stocks tend to lose charging and discharging capabilities as some stocks are kept for ages. *like those they sell real cheap*

4) Ask for better price if this isn't compelling enough!! I can also do a few discounts.

[attachmentid=3886512]

PM for BEST PRICE!! All price listed including postage anywhere in Peninsular!

[attachmentid=3886622]
a) PN968 10000mAh~RM95

[attachmentid=3886518]
b) PN910 11200mAh FULL SET WITH INTERCONNECTOR!! ~ RM120

[attachmentid=3886521]
c) PN912 16800mAh FULL SET WITH INTERCONNECTOR!! ~ RM155

[attachmentid=3886529]
d) PN913 10000mAh ~RM95

[attachmentid=3886593]
e) PN938 10000mAh ~RM100

[attachmentid=3886602]
f) PN929 15000mAh ~RM130

Post on thread for other models of Pineng Brand Powerbank

P/s:This warranty does not apply to:
Damage caused by accident, abuse, misuse, water, flood, fire or other acts of nature or external causes
ORIGINAL PINENG BRAND POWERBANK!!!

COMPATIBLE WITH:iPad / iPhone / iPod / GPS / PDA / PSP / Camera / Mobile phone (HTC, Apple iPhones, Samsung, Motorola, Toshiba, Panasonic, Blackberry, Nokia, Sony-Ericsson, LG, Palm & etc).

PRODUCT FEATURES :
1) LCD Display : Digital LCD display indicates the charging and discharging status and residual power, experience the intelligent life.

2) Dual USB Output :With dual USB output interfaces, mobile phones/Ipad can be charged at the same time, more efficiently.

3) Adopting Japan Imported-Technology :Adopt Japanese high efficient boosting technique and battery protection IC. Built-in intelligent voltage recognition chip automatically detects the voltage and current of different kinds of digital products.

4) Protective Design :Prevent from over charging, over discharging and short circuit, and also high temperature protective design.

5) High Compatibility :Compatible with 95% mobile phones in the market

Money back if found not genuine..

CHEAP CHEAP!!

[WTS] Steelseries Siberia Neckband SOLD

JromeTJ — Sat, 08 Mar 2014 11:07:22 +0800

[b]Item(s):Steelseries Siberia Neckband
[b]Package includes:Just the headphones.

[b]Price:SOLD TO imacsplayer

[b]Warranty:None
[b]Dealing method:COD or Postage

[b]Location of seller: Batu Pahat

[b]Contact method/details:PM here then I'll WhatsApp

[b]Age of item: Almost 2 years
---

[b]Item(s) conditions: 8/10 A small part of the rubber came off at the remote. Other than that everything is working flawlessly

[b]Picture: [attachmentid=3882244][attachmentid=3882245][attachmentid=3882250]

[b]Reason for sale:Getting a new headphone.

[WTS] Logitech G510. Used. Very good condition

JromeTJ — Sat, 08 Mar 2014 02:39:28 +0800

[b]Item(s):Logitech G510
[b]Package includes:Box and a wrist rest

[b]Price:RM 180

[b]Warranty: Not sure. A year more from Logitech

[b]Dealing method: COD or Postage (Parit Raja Johor)

[b]Location: Batu Pahat

[b]Contact method/details: PM me. or WhatsApp
---

[b]Item(s) conditions: 9.5/10

[b]Picture: [attachmentid=3882266]

[b]Reason for sale: no longer in use

[SOLD] Logitech G510

JromeTJ — Sun, 12 Jan 2014 22:30:01 +0800

[b]Item(s): Logitech G510
[b]Package includes: Keyboard, wrist rest and box

[b]Price: (SOLD)

[b]Warranty: Not sure..

[b]Dealing method: COD or Postage

[b]Location: Ipoh

[b]Contact method/details: Will PM.
---

[b]Item(s) conditions: 9/10

[b]Picture: [attachmentid=3812896] [attachmentid=3812903]

[b]Reason for sale: Need money..

Linus Tech Tips Givaway

JromeTJ — Sat, 01 Jun 2013 01:53:21 +0800

Just wanna share this contest with everyone. Cheers!

http://linustechtips.com/main/topic/20876-...f-4-htc-phones/

[WTB] Used/ New Nokia Lumia 520

JromeTJ — Tue, 14 May 2013 19:36:57 +0800

Wanna buy a used or a new nokia lumia 520. Can anyone help?
Can nego the price. I have a corby 2 that i just wanna throw away.