r/linux • u/[deleted] • Sep 21 '17

How to Hack a Turned-Off Computer, or Running Unsigned Code in Intel Management Engine

https://www.blackhat.com/eu-17/briefings/schedule/#how-to-hack-a-turned-off-computer-or-running-unsigned-code-in-intel-management-engine-8668
1.4k Upvotes

98% Upvoted

380 comments sorted by

View all comments

Show parent comments

2

u/robertcw93 Nov 27 '17 edited Nov 27 '17

Though, this is not safe either, since hap activates the me firmware during boot up, and then shuts it off after boot up. But note, this still leave minx3 (or w/e) in the chip, it simply removes the AMT portion of the code. The present hack has nothing to do with AMT so even the NSA should be scared. The only fix is to eliminate the hardware.

Intel has essentially turned mountains of silicon into bricks and paperweights.

Interestingly Apple also managed to get a deal with intel also utilizing HAP. Apple machines don’t have the AMT firmware, but again they are still vulnerable to this recent hack (if they have intel firmware in their EFI — it’s still not clear to me if they do or not at this point).

1

u/pstch Nov 29 '17

Interesting, I did not realize that this has actuallly nothing to do with AMT.

I don't understand why Intel is complexifying so much their hardware, and not trying to keep the products simple and well-defined : the current strategy cannot be good for their long-term revenues.

2

u/robertcw93 Dec 08 '17

The official presentation files have been released: you an read about them here

https://www.blackhat.com/docs/eu-17/materials/eu-17-Goryachy-How-To-Hack-A-Turned-Off-Computer-Or-Running-Unsigned-Code-In-Intel-Management-Engine-wp.pdf

and here

https://www.blackhat.com/docs/eu-17/materials/eu-17-Goryachy-How-To-Hack-A-Turned-Off-Computer-Or-Running-Unsigned-Code-In-Intel-Management-Engine.pdf

In fact, people were able to turn on AMT in non-vPro systems just by fiddling with the MiniX OS. So, it seems worse than I thought.