Feature Request: Optional n digit user consent

[veitw]

I would love to see a random (e.g.) 6 digit user consent feature comparable to the AMT user consent that may be used instead of a yes/no request.

This would have several advantages over the current interactive window user consent implementation:

• the MC user has to be in actual contact with the device user, using a separate communication channel such as phone
• lower risk of accidentally allowing a remote user unwanted access
• using a (partially transparent) overlay it may always be shown on top (thus not being missed by the user) without stealing focus
• I imagine that an overlay could easier be implemented for situations where displaying interactive windows is impossible (such as on user login screens)

[Ylianst]

Good request. Because Intel AMT can't capture keyboard/mouse, I suspect that the 6 digit code that is used today was the only way they could do it. However, it does have interesting security properties. Bryan is working on the notification bar what will show up when remote desktop is enabled, if you close the bar it will disconnect the session. We will release that first and then look at this.

This said, I am sitting on a huge pile of work. It's starting to be a bit much. Not sure when I will get to this.

[dinger1986]

AMT @si458

[veitw]

@dinger1986 this is not AMT but a request for optional user consent via consent code for agent connections, like it is implemented in AMT.

[si458]

i have just re-read ur enhancement and yes i follow you! so rather than a user consent box, you would like a pop up saying, please giz code 123456 to agent for approval then agent types it in and gets accepted or rejected! so its the same as AMT but done with the agent instead!

[dinger1986]

@dinger1986 this is not AMT but a request for optional user consent via consent code for agent connections, like it is implemented in AMT.

ah ok sorry, just trying to close down some old issues, this doesnt sound like one which should be closed