Remote Desktop without ANY Software - Out-of-band Access - Chris Titus Tech
video description
It is however my reason to avoid Intel as much as i can in my personal systems, because this management engine that has THIS much low level access is present in any cheap including the non vPro ones. The vPro stuff is just disabled on those.
This does require a follow up video though, because i notice most MeshCommander video's do not touch on Intel AMT at all.
What i did find is a cool firmware loader tool they built so it can run directly from the target machine.
So it would be cool to show a vPro machine that is not initialized, how to initialize it and then how to load MeshCommander with the Firmware loader. That way you don't even need software installed and can manage it directly from the target machine in the future including the remote desktop.
Date: 2022-03-21
Related videos
Comments and reviews: 8
Reggie
AMT has just again been hit with a serious security issue. Opening up to persistent malware/rootkits that go beyond the os and unless you flash, and that is almost impossible unless you know exactly what you're doing as it's not easy to reflash Minix as there is no software provided. That's what they get for taking Minix OS and putting a backdoor in it. I would advise it for non production and behind some real firewalls as software firewall on this thing will be bypassed. AMT is very dangerous for someone who doesn't know. CVE-2020-8758 for those interested. It's at almost 10/10 severity. 10/10 is RARE and is the UPMOST critical, intel has just published this but no one is reporting on it. It's a VERY SEVERE stop everything you're doing critical. CVE-2020-8758 - Year 2020
reply
AMT has just again been hit with a serious security issue. Opening up to persistent malware/rootkits that go beyond the os and unless you flash, and that is almost impossible unless you know exactly what you're doing as it's not easy to reflash Minix as there is no software provided. That's what they get for taking Minix OS and putting a backdoor in it. I would advise it for non production and behind some real firewalls as software firewall on this thing will be bypassed. AMT is very dangerous for someone who doesn't know. CVE-2020-8758 for those interested. It's at almost 10/10 severity. 10/10 is RARE and is the UPMOST critical, intel has just published this but no one is reporting on it. It's a VERY SEVERE stop everything you're doing critical. CVE-2020-8758 - Year 2020
reply
Jeffrey
I have 3 Intel mult-icore machines. As far as I know only one has Vpro on the box. I will have to look very closely at it, before assigning it critical network duties. I will have to dig into my systems to see if this is a feature I want to use. It may be something I want to disable if possible. I am new to remote system management. Knowing about this backdoor may inform my choice of future machines. I I was thinking of adding another NIC to this machine anyway. That should bypass this -Feature- even if I lose a little speed. The new NIC would be in a PCI slot. Is this feature only on Desktops? Could it be buried in a Gaming Laptop? I know a few people who would sorry if it is. Thanks for more great work.
reply
I have 3 Intel mult-icore machines. As far as I know only one has Vpro on the box. I will have to look very closely at it, before assigning it critical network duties. I will have to dig into my systems to see if this is a feature I want to use. It may be something I want to disable if possible. I am new to remote system management. Knowing about this backdoor may inform my choice of future machines. I I was thinking of adding another NIC to this machine anyway. That should bypass this -Feature- even if I lose a little speed. The new NIC would be in a PCI slot. Is this feature only on Desktops? Could it be buried in a Gaming Laptop? I know a few people who would sorry if it is. Thanks for more great work.
reply
Torleif
I saw Your recomandation of chrome remote desktop. I installed it om my Manjaro server. I have been using nomachine for several years. Is this still Your reccomandation? I have a headless Linux server, the nomachine dosent work well With my Magic keyboard, therfore I am checing out Other solutions.
I have usedLinux sinne 2006, but the 5 last years I have been lazy, forgot a lot from When I was setting up postfix etc.. Basically my server runs plex and acts as a filserver over ssh/sftp. I wish to have a smooth experience when connecting to my server (Manjaro Xfce) from work.
reply
I saw Your recomandation of chrome remote desktop. I installed it om my Manjaro server. I have been using nomachine for several years. Is this still Your reccomandation? I have a headless Linux server, the nomachine dosent work well With my Magic keyboard, therfore I am checing out Other solutions.
I have usedLinux sinne 2006, but the 5 last years I have been lazy, forgot a lot from When I was setting up postfix etc.. Basically my server runs plex and acts as a filserver over ssh/sftp. I wish to have a smooth experience when connecting to my server (Manjaro Xfce) from work.
reply
Frank
I-m watching from an iPhone 7 Plus. And I-m unable to see anything useful because you keep the camera focused on yourself. Or too wide of an angle to see the part of the screen that has relevant content. Please focus on your editing and use zoom tools. Also choose voiceovers more often. Your content choices are great. The info you provide is great. But stop making it about you visually. Let the content come to the front and you need to disappear into the background while you-re showing stuff in this visual medium.
reply
I-m watching from an iPhone 7 Plus. And I-m unable to see anything useful because you keep the camera focused on yourself. Or too wide of an angle to see the part of the screen that has relevant content. Please focus on your editing and use zoom tools. Also choose voiceovers more often. Your content choices are great. The info you provide is great. But stop making it about you visually. Let the content come to the front and you need to disappear into the background while you-re showing stuff in this visual medium.
reply
Caren
You kind of skipped over a really important step when you said enter the other computer's information. I want to be able to use this on my relatives' computer to help him with programs - so need to be able to remote into his computer with very little work on his part...
so - what do I need from him to be able to enter his computer information into the Mesh software?
reply
You kind of skipped over a really important step when you said enter the other computer's information. I want to be able to use this on my relatives' computer to help him with programs - so need to be able to remote into his computer with very little work on his part...
so - what do I need from him to be able to enter his computer information into the Mesh software?
reply
Jeremias
Practically, it is not possible to get remote access of a computer without using any software. One has to use remote access tools like logmein, R-HUB remote support servers etc. or something else for remotely accessing computers from anywhere anytime.
reply
Practically, it is not possible to get remote access of a computer without using any software. One has to use remote access tools like logmein, R-HUB remote support servers etc. or something else for remotely accessing computers from anywhere anytime.
reply
SMN
Practically, it is not possible to get remote access of a computer without using any software. One has to use remote access tools like logmein, R-HUB remote support servers etc. or something else for remotely accessing computers from anywhere anytime.
reply
Practically, it is not possible to get remote access of a computer without using any software. One has to use remote access tools like logmein, R-HUB remote support servers etc. or something else for remotely accessing computers from anywhere anytime.
reply
Kelvin
No, it should be nuked from orbit!
Or at minimum, disabled - There have been numerous vulnerabilities discovered in vPro/MeBX over the past several years, and unless you constantly keep your BIOS updated each month, simply don't do it!
reply
No, it should be nuked from orbit!
Or at minimum, disabled - There have been numerous vulnerabilities discovered in vPro/MeBX over the past several years, and unless you constantly keep your BIOS updated each month, simply don't do it!
reply
Add a review, comment
Other channel videos
