Lemmy.eus
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
jorgesumle@lemmy.pt to Technology@lemmy.ml · 3 years ago

How Intel wants to backdoor every computer in the world | Intel Management Engine explained

invidious.kavin.rocks

external-link
message-square
18
fedilink
33
external-link

How Intel wants to backdoor every computer in the world | Intel Management Engine explained

invidious.kavin.rocks

jorgesumle@lemmy.pt to Technology@lemmy.ml · 3 years ago
message-square
18
fedilink
Intel embeds Management Engine into all of its computers since 2008. Intel Management Engine has been criticized for its security risks and has been called a backdoor with rootkit possibilities by many security experts and researchers. This is Intel Management Engine. A subsystem microprocessor that’s operating inside every Intel CPU platform made from 2008 onward. Despite its name and some basic functions, we don’t know anything about what Intel Management really does. What we do know is that this microcontroller works completely independently from the main CPU. It can’t be manually removed or disabled. Even if the main computer is powered off, as long as it is plugged in to the mains or the battery, IME will continue to run. Intel Management Engine is a computer within a computer. It is running it’s own operating system, called Minix, and is installed by default on every modern computer with an Intel CPU. This probably makes Minix the most widely used operating system in the world. But unlike Windows, Mac OS or Linux, Minix is completely outside of user control. It cannot be scanned by an antivirus or malware detection software. It can bypass any firewall configuration and has a dedicated network connection that can circumvent the main CPU and the main operating system. Sources and further reading https://www.slideshare.net/codeblue_jp/igor-skochinsky-enpub/17 https://www.howtogeek.com/334013/intel-management-engine-explained-the-tiny-computer-inside-your-cpu/ Intel Management Engine security problems https://boingboing.net/2016/06/15/intel-x86-processors-ship-with.html https://www.csoonline.com/article/3220476/researchers-say-now-you-too-can-disable-intel-me-backdoor-thanks-to-the-nsa.html https://www.techrepublic.com/blog/it-security/researchers-create-nearly-undetectable-hardware-backdoor/ https://www.zdnet.com/article/intel-weve-found-severe-bugs-in-secretive-management-engine-affecting-millions/ https://www.eff.org/deeplinks/2017/05/intels-management-engine-security-hazard-and-users-need-way-disable-it https://mjg59.dreamwidth.org/48429.html https://www.wired.com/story/intel-management-engine-vulnerabilities-pcs-servers-iot/ https://www.zdnet.com/article/computer-vendors-start-disabling-intel-management-engine/ https://www.zdnet.com/article/minix-intels-hidden-in-chip-operating-system/ https://www.networkworld.com/article/3236064/minix-the-most-popular-os-in-the-world-thanks-to-intel.html https://www.fsf.org/blogs/sysadmin/the-management-engine-an-attack-on-computer-users-freedom https://www.fsf.org/blogs/licensing/intel-me-and-why-we-should-get-rid-of-me https://www.zdnet.com/article/researchers-say-intels-management-engine-feature-can-be-switched-off/ Purism's approach to Intel ME https://puri.sm/learn/intel-me/ https://puri.sm/posts/deep-dive-into-intel-me-disablement/ Bitcoin: 1C7UkndgpQqjTrUkk8pY1rRpmddwHaEEuf Dash Xm4Mc5gXhcpWXKN84c7YRD4GSb1fpKFmrc Litecoin LMhiVJdFhYPejMPJE7r9ooP3nm3DrX4eBT Ethereum 0x6F8bb890E122B9914989D861444Fa492B8520575 Credits Music by CO.AG Music https://www.youtube.com/channel/UCcavSftXHgxLBWwLDm_bNvA Follow me: https://twitter.com/The_HatedOne_ https://www.bitchute.com/TheHatedOne/ https://www.reddit.com/r/thehatedone/ https://www.minds.com/The_HatedOne The footage and images featured in the video were for critical analysis, commentary and parody, which are protected under the Fair Use laws of the United States Copyright act of 1976.
  • brombek@lemmy.ml
    link
    fedilink
    arrow-up
    5
    ·
    3 years ago

    Yeah, still the case. Even if ME is not made for malicious purposes, it is a very bad idea to begin with. It is only useful for enterprise customers and not in a way that would not have been possible before.

    Some say that Netflix has a blob in ME :)

    Good watch: https://media.ccc.de/v/34c3-8782-intel_me_myths_and_reality

Technology@lemmy.ml

technology@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.ml

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 314 users / day
  • 1.33K users / week
  • 2.44K users / month
  • 7.11K users / 6 months
  • 18 local subscribers
  • 37.9K subscribers
  • 4.04K Posts
  • 36.5K Comments
  • Modlog
  • mods:
  • MinutePhrase@lemmy.ml
  • BE: 0.19.7
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org