[ / / / / / / / / / / / / / ] [ dir / cafechan / e / hydrus / leftpol / namibia / russian / sonyeon / tenda ][Options][ watchlist ]

/tech/ - Technology

You can now write text to your AI-generated image at https://aiproto.com It is currently free to use for Proto members.
Name
Email
Subject
Comment *
File
Select/drop/paste files here
* = required field[▶ Show post options & limits]
Confused? See the FAQ.
Expand all images

[–]

 No.834537>>834542 >>834662 [Watch Thread][Show All Posts]

https://www.bleepingcomputer.com/news/hardware/researchers-find-a-way-to-disable-much-hated-intel-me-component-courtesy-of-the-nsa/

>Researchers from Positive Technologies -- a provider of enterprise security solutions -- have found a way to disable the Intel Management Engine (ME), a much-hated component of Intel CPUs that many have called a secret backdoor, even if Intel advertised it as a "remote PC management" solution. People have been trying for years to find a way to disable the Intel ME component, but have failed all this time. This is because disabling Intel ME crashes computers, as Intel ME is responsible for the initialization, power management, and launch of the main Intel processor.

>Positive Technologies experts revealed they discovered a hidden bit inside the firmware code, which when flipped (set to "1") will disable ME after ME has done its job and booted up the main processor. The bit is labelled "reserve_hap" and a nearby comment describes it as "High Assurance Platform (HAP) enable." High Assurance Platform (HAP) is an NSA program that describes a series of rules for running secure computing platforms. Researchers believe Intel has added the ME-disabling bit at the behest of the NSA, who needed a method of disabling ME as a security measure for computers running in highly sensitive environments.

http://blog.ptsecurity.com/2017/08/disabling-intel-me.html

Can I buy Intel processors now? I fucking love NSA.

 No.834542>>834548

>>834537 (OP)

>"fixed" one "flaw" yet "accidentally" create another.

Check'm. Also NSA and security do not compute.


 No.834548

>>834542

It's for their own machines so maybe it does something, unless Intel have built in a different bit to reactivate the ME for a foreign government cough cough (((israel))) cough


 No.834585

How the fuck can I do this?


 No.834593

https://twitter.com/rootkovska/status/938458875522666497

>Attacking #IntelME by @h0t_max & @_markel___ at #BHEU

>1. Requires malformed file on SPI flash (needs physical access or bug in BIOS)

>2. Bug in early-loaded module, so ME "disabling" by HAP is not a cure

>3. Culprit is classic(!) stack overflow

>4. Full code exec in ME Congrats!

Sorry OP but your solution is worthless.


 No.834600>>834717

WOW FRESH NEWS

Congratulations, you totally contributed to the topic of Intel Meme Engine, OP!


 No.834662

>>834537 (OP)

ME CANNOT BE DISABLED ON NEW GEN HARDWARE

https://mail.coreboot.org/pipermail/coreboot/2017-December/085669.html

*"The disappointing fact is that on modern computers, it is impossible to

completely disable ME. This is primarily due*

*to the fact that this technology is responsible for initialization, power

management, and launch of the main processor."*

I will repeat again (in RED). Long before BIOS starts, there are (at least

>5) very complex phases how the whole platform, by HW

and FW is initialized. There are several components which are interacting

with PCH, thus/read ME, BEFORE BIOS starts, These

components are the following:

PMIC (Power Management IC, integrated or discrete)

EC (Embedded Controller)

Some of IO init (HW wise default straps, then ME applied FW straps)

ICC (Integrated Clock Controller)

All of which need to be set correctly BEFORE MEI allows BIOS to start. And

there are some relationships among these entities

in the process of ME driving init of these components.


 No.834717

Bump.

>>834600

Stay salty you affirmative action hire.




[Return][Go to top][Catalog][Screencap][Nerve Center][Cancer][Update] ( Scroll to new posts) ( Auto) 5
7 replies | 0 images | Page ?
[Post a Reply]
[ / / / / / / / / / / / / / ] [ dir / cafechan / e / hydrus / leftpol / namibia / russian / sonyeon / tenda ][ watchlist ]