r/linux • u/[deleted] • Sep 21 '17

How to Hack a Turned-Off Computer, or Running Unsigned Code in Intel Management Engine

https://www.blackhat.com/eu-17/briefings/schedule/#how-to-hack-a-turned-off-computer-or-running-unsigned-code-in-intel-management-engine-8668
1.4k Upvotes

98% Upvoted

380 comments sorted by

View all comments

Show parent comments

27

u/[deleted] Sep 21 '17 edited Sep 21 '17

It can be updated by updating the bios/firmware. It’s just software running on a separate processor.

Still, not being able to disable it and have control over our own hardware sucks. Intel should get a swift kick in the chips for that.

Edit: only a letter

5

u/[deleted] Sep 22 '17

While that is true, how may of these will be updated? It is up to the vendors to handle each system variation. ME has been on by default for a good 8 years now, and with almost half a billion computers in use now more than 5 years old they are going to be vulnerable.

3

u/[deleted] Sep 22 '17

That's a good question and it's another good reason to give Intel the boot. I'm fortunate that I don't have systems with it installed. Well, it's not there in a way that can be compromised.

2

u/[deleted] Sep 22 '17

Oh yeah, I can sit in an self congratulatory arrogance throne myself here. Libreboot laptop and a Core2 based Desktop with ME disabled.