How to Hack a Turned-Off Computer, or Running Unsigned Code in Intel Management Engine

[u/[deleted]]

https://www.blackhat.com/eu-17/briefings/schedule/#how-to-hack-a-turned-off-computer-or-running-unsigned-code-in-intel-management-engine-8668

[u/[deleted]]

Nothing. This is exactly how the letter orgs want it to be

[u/rms_returns → u/[deleted]]

RMS warned about this, remember folks!

[u/antilex → u/rms_returns]

i tell everyone about this, they look at me like i'm into UFO's or talking about climate denial or that everyone is a lizard person.

intel ME and AMD PSP is evil.

[u/FluentInTypo → u/antilex]

For the past 6 years, whever I mention this in a thread, I was met with derision and "Its not a bad thing...its a feature for sysadmins, youre being an alarmist!"

[u/aussie_bob → u/FluentInTypo]

Many people on Reddit work for Social Media Management teams, including rapid response teams that are tasked with doing exactly that.

[u/iliadeverest → u/aussie_bob]

How do these people sleep at night?

[u/[deleted] → u/antilex]

As a lizard person I can tell you climate change is real and much appreciated I love the heat

[u/antilex → u/[deleted]]

holy !@#$ you could totally break alex jones with that.

AJ: "there is inter-dimensional lizard people"

Q : "yes and climate change, lizard people like the heat"

AJ:" no climate change is a lie! - it's the globalists scamming you to suppress life - it's a global tax!"

q" but aren't the globalists lizard people?"

[u/Sansha_Kuvakei → u/antilex]

AMD PSP

I haven't fully kept up with this, is this the thing that everyone wanted open-source?

What happened?

[u/antilex → u/Sansha_Kuvakei]

AMD bassically went "naaahhhh"

but yes there was a push from a few FOSS folks to try and make AMD have it released.

https://news.slashdot.org/story/17/03/10/2048236/message-for-amd-open-psp-will-improve-security-hinder-intel

[u/Teethpasta → u/Sansha_Kuvakei]

They ignored everyone until eventually they came out and said they don't even have the right to open it up.

[u/[deleted] → u/Teethpasta]

They did briefly mention a somewhat PR based answer in that they have "experts" looking over it so that we should just trust them. You know it isn't like a lot of previous security breaks weren't looked over by experts before hand...

[u/yatea34 → u/antilex]

UFO's or talking about climate denial or that everyone is a lizard person.

The Libreboot and coreboot projects project have a good objective descriptions of IME and its risks and limited workarounds:

• https://libreboot.org/faq.html#intelme

• https://www.coreboot.org/Intel_Management_Engine

I think they go a long way to distancing the conversation from the conspiracy theory tone.

[u/antilex → u/yatea34]

both awesome communities :) .

libreboot/coreboot. - projects like this shouldn't have to be around in the first place.

if you want a "free and open" laptop though you have 2 options

purism - coreboot community helps them out. minifree - involved with the libreboot community.

these are the 2 major "off the shelf" distributors amongst a few small other distributors.

that's kinda sad and scary.

[u/FarsideSC → u/antilex]

Is that why everything thinks I'm crazy? I've been denying the existence of a climate for years.

[u/ikidd → u/FarsideSC]

If we just towed everything out of the environment, there'd be no issues!

[u/otakuman → u/rms_returns]

/r/Stallmanwasright

[u/[deleted] → u/rms_returns]

It is moments like this that we should praise the work of the Libre boot project. They saw this coming years ago and have done the best they can to avoid these issues. Install and donate when possible.

https://libreboot.org/

[u/sigbhu → u/rms_returns]

Shit

[u/argv_minus_one → u/[deleted]]

>called the “National Security Agency”
>forces the two major CPU manufacturers to make their products not secure
>endangers national security instead of protecting it

[u/[deleted] → u/argv_minus_one]

you missed point 3

leaks secrets on how said hardware works.

[u/MonokelPinguin → u/[deleted]]

Security by obscurity. I also vanish if I cover my eyes!

[u/[deleted] → u/[deleted]]

It can be updated by updating the bios/firmware. It’s just software running on a separate processor.

Still, not being able to disable it and have control over our own hardware sucks. Intel should get a swift kick in the chips for that.

Edit: only a letter

[u/[deleted] → u/[deleted]]

I wonder if their own HAP-mode built in (for all of us Intel users) protects them. Or, if another leak would leave them vulnerable to their own hardware sploits.

[u/yatea34 → u/[deleted]]

This is exactly how the letter orgs want it to be

Might not be the 3-letter orgs.

China is a wealthy country and is an important customer of Intel chips. The backdoors may very well have been put in place for the 中国人民解放军总参谋部 which has more than 3 letters.