Hackers easily hijack Windows crash reports, report says

[A Guy]

Windows’ error- and crash-reporting system sends a wealth of data unencrypted and in the clear, information that eavesdropping hackers or state security agencies can use to refine and pinpoint their attacks, a researcher said.

Not coincidentally, recently the popular German newsmagazine Der Spiegel reported that the U.S. National Security Agency (NSA) collects Windows crash reports from its global wiretaps to sniff out details of targeted PCs, including the installed software and operating systems, down to the version numbers and whether the programs or OSes have been patched; application and operating system crashes that signal vulnerabilities that could be exploited with malware; and even the devices and peripherals that have been plugged into the computers.

Source

A Guy

 

[carwiz]

"They" don't need to go to that much trouble. If you have the PCI Simple Comm Device enabled and the drivers loaded, your PC can be turned on and manipulated remotely. All PC motherboards made in the last five years or so and that run Windows have these turned on by default.

 

[synysterlulz]

Can't you just disable the service? Kinda sucks anyway.

 

[carwiz]

You have to disable the hardware or Windows will keep installing the drivers.

 

[synysterlulz]

Is this device necessary though? ->PCI Simple Comm Device

 

[carwiz]

Nope. It's not used for anything else. It's part of "Management Information Technology". If your PC is part of an IT network, it may be required. Mine has been disabled since day 1.

 

[synysterlulz]

Well sweet I just disabled mine. Thanks a ton.

 

[A Guy]

Welcome to Seven Forums synysterlulz.

I gots no "other devices" Ken

A Guy

 

[carwiz]

Welcome to Seven Forums synysterlulz.

I gots no "other devices" Ken

A Guy

If it's enabled, it may show up under Network Devices. Also, right click on the panel and select Show Hidden Devices. It's in there somewhere.

 

[A Guy]

Anywhere else?

A Guy

 

[Total]

Mine must be not enabled , can't find it even in the hidden devices ..

 

[carwiz]

System devices? You got me. It's been so long since I disabled mine, I forget were it was to start with.

 

[A Guy]

Oh well, no sign of them

A Guy

 

[TVeblen]

Can't find it on my system neither.

EDIT: Of interest:
http://support.asus.com/Search/KDetail.aspx?SLanguage=en&no=1BB51C30-64A5-5E84-D250-0AE194742F93&t=2

 

[carwiz]

Apparently, it only applies to motherboards with Intel VPro Technology. It's called Intel Active Management Technology.

Here's some details of what AMT can do. Note that it includes remote power-on.
Intel Active Management Technology - Wikipedia, the free encyclopedia