/tech/ - Technology★

nigga fuck off this shit nigga go smoke some rock lol gucci gang gucci gang

TPM

>muh spy chip

solder should be easy to spot with eyes, swapped boards/cards even more so

>UEFI

reflashing from livecd doesn't take days

>missing screws

weak point, screws are not that strong

calm down, t. FBI

No one's going to bother with a custom modification to your laptop. Even the NSA would just use software.

t. spook

It's better to do this preemptively. You can find out of place hardware easily by inspecting your machine, but unless you have previous ROM dumps you can compare with, you don't have a way to know that your firmware has not been altered.

The easy way to know you're safe from drive by USB exploits is to fill the USB ports in with hot glue. You will additionally want to fill in or otherwise disable any port that has DMA.

A crude intrusion sensor can be made with glitter nail polish. Put some on the important screws on the bottom and take high resolution pics of them. Keep the pics in a safe place. Compare the glitter patterns on the screws to the pics every time you turn the machine on. If there are screwdriver marks or different glitter patterns, intrusion is likely.

I would additionally recommend you add some blue thread locker before applying the paint so that the screws don't loosen by themselves if that's an issue on your machine.

More autism-tier hardware security advice can be found at link related. This article used to ship with the libreboot docs, but has since been removed.

https://notabug.org/libreboot/libreboot/src/8791c95748efa02fd8c998706883a0d23ff0e85e/docs/hardware/t60_security.md

If this seems like too much for you, it may be worth asking yourself if you're really an important enough target for anybody to bother with.

Look at the hardware implants described here to get an idea of what's in use: https://en.wikipedia.org/wiki/Global_surveillance_disclosures_(2013%E2%80%93present)

But yeah, any writable firmwware is suspect also. That's not just the CPU, since a lot of hardware uses firmware now. Kaspersky found malware hiding in HD firmware, totally invisible to the OS.

>tfw it's just some autist from your work who likes stealing screws.

Depending on your persona importance there are two possibilities:

1) Someone installed obvious hardware tap or bug, inspect the board carefully, compare with photos from Internet and schematics. Flash all firmwares with programmer or solder-down new if they have some sort of protection. Add nail polish or epoxy on those chips.

2) They forged a double-function chip instead of USB or network controller and utilize your DDR bus as cellular antenna. There is no way you can find out if it's done properly. There is no need for skilled attacker like NSA or megahacker like Mr Reddit to do that, though, Intel ME comes pre-installed already and has ton-of-a-bugs.

>>829046

Intel ME is disabled (or can be disabled) on consumer-grade products.

>>829085

You aren't good with computers, right?

Do not confuse Management Engine and AMT.

I bet you still can't tell difference between Internet and Internet Explorer, gramps.

>>829034

>DMA access

lol

>>829194

Direct DMA memory access.