I see that Dell has published an update timeline for the latest set of vulnerabilities. I have a Precision 5510, and nearly two months to respond to serious security issues is simply insane. I have a few questions:
- Can Dell simply provide a way to disable the ME. It's been a consistent source of security vulnerabilities. I want nothing to do with the ME.
- If that's not possible, can the timeline be accelerated to a more normal one (I'd expect a security patch in a few weeks, maximum, not two months.)
- In all cases, will the patch be something that can be applied from Linux - or will it be like the Thunderbolt patches, which required Windows in order to be applied.
"There have been some delays to the updates for this issue - these can be sometimes be down to issues found during validation testing that require further investigation.
I would expect the website to be updated as further information becomes available."
With regard to the market for disabling the Intel Management Engine, this is only applicable to new systems. I don't have any further information on this as this is a business move from Dell. You could contact Dell Sales though to check further what models are included for this.
I did contact them and rest assured it was an exercise in fultility.
Regarding article SLN308237, the web page has many duplications, inconsistencies and out-of-date information and they do not bother to correct the web page.
Not very professional. All my HP business notebooks were updated very quickly with updates from the HP support seection.
azeu
9 Posts
1044
0
Posted December 12th, 2017 04:00
I agree with your comments.
Dell escalations team advised:
"There have been some delays to the updates for this issue - these can be sometimes be down to issues found during validation testing that require further investigation.
I would expect the website to be updated as further information becomes available."
With regard to the market for disabling the Intel Management Engine, this is only applicable to new systems. I don't have any further information on this as this is a business move from Dell. You could contact Dell Sales though to check further what models are included for this.
I did contact them and rest assured it was an exercise in fultility.
Regarding article SLN308237, the web page has many duplications, inconsistencies and out-of-date information and they do not bother to correct the web page.
Not very professional. All my HP business notebooks were updated very quickly with updates from the HP support seection.