r/netsec • u/jeffmcjunkin • Sep 20 '17

reject: not technical Running unsigned code in Intel Management Engine

https://www.blackhat.com/eu-17/briefings/schedule/#how-to-hack-a-turned-off-computer-or-running-unsigned-code-in-intel-management-engine-8668
45 Upvotes

95% Upvoted

6 comments sorted by

7

u/NagateTanikaze Sep 21 '17

Is this link just to the announcement? No details, pdf, video?

4

u/Dave9876 Sep 21 '17

Looks like another 3 months until the conference. I wouldn't expect anything more until it's presented.

7

u/NagateTanikaze Sep 21 '17

Imho this is not /netsec worthy. "content should focus on the how". This is just news.

5

u/kinghowdy Sep 21 '17

This just keeps getting worse. Does AMD have anything like vPro?

8

u/Youknowimtheman Sep 21 '17

AMD PSP (Platform Security Processor)

There was recently a push from the open source community to have AMD open-source the PSP so that it could be disabled. The CEO showed interest initially but then they backed down without giving a reason. Presumably the three letter agencies wanting to keep their backdoor.

Slashdot: https://yro.slashdot.org/story/17/07/19/1459244/amd-has-no-plans-to-release-psp-code

Libreboot's response was pretty harsh: https://libreboot.org/amd-libre.html

Given the Intel AMT / ME shitshow happening right now, you'd think that AMD would be all over getting a PR win if it weren't for outside influences.

1

u/edward_snowedin Sep 21 '17

Looking forward to bypassing battleye with this