Intel x86s hide another CPU that can take over your machine (you can't audit it)

Intel x86s hide another CPU that can take over your machine (you can't audit it)

-- Tom

 

Damn, remote management strikes again

Edit: See https://news.ycombinator.com/item?id=11880935

 

AMT, vPRO, whatever you wanna call it, has been around for more than a decade. No biggie.
Go into BIOS, change, end of story.
Mrk

 

@Mrkvonic

Did you read the article? On newer Intel CPUs it cannot be disabled, and is required for a computer to boot.

(I mean, it's only a permanent, low-level remote access tool that stays on all the time. Why would anyone want to turn it off, ever, for any reason? Surely the criminally inclined would never even think of using it!)

 

I don't read sensational articles on purpose, and I get my info from other sources.
This is nothing new or special. Without going into details, this is not a problem.
Mrk

 

@Mrkvonic

There's a difference between being level-headed and being in denial.

 

There's also a difference between having in-depth technical knowledge of the technology and just talking FUD.
Mrk

 

'Newer' meaning in the last 7 years...

 

Agreed. This article is sensationalistic clickbait and contradicts itself many times. Unfortunately, I did read it, just so I could say that.

 

Intel has responded:

https://blogs.mcafee.com/executive-...tels-approach-designing-world-class-security/

 

@Mrkvonic,

Could you substantiate why this would not be a possible source for concern ? It is what it is, it cannot be disabled and it cannot be audited.
It is true that some organizations on this planet would be eager to have a tool for control.
Oh, just like the NSA would never engage in dragnet surveillance ..

 

Forget about movies please, it does not work like that.
It CAN be disabled, and therefore it is not an issue.
Even if it is enabled, it is still not an issue.

Now, as to why - please read the reference manual on amt and vpro, and you will see why not.

Mrk

 

Terminology isn't being used correctly here. Intel ME(Management Engine) is part of the architecture in recent processors and can NOT be disabled. Intel AMT(Advanced Management Technology) facilitates remote management of ME and can be disabled in bios. Intel "vPro" is used by Intel to cover a multitude of technologies, and is also often used as a synonym for AMT.
Joanna Rutkowska(Known for Bluepill "Ring -1" hypervisor rootkit and QubesOS) has written a paper with more technical information:
http://blog.invisiblethings.org/2015/10/27/x86_harmful.html

 

Nothing like one of Joanna's papers to clear the air about the topic!

Thanks for posting the link!

-- Tom

 

Here is a web link to a follow-on posting by Joanna Rutkowska entitled: State considered harmful - A proposal for a stateless laptop (new paper)

At the above link you will find a link to her PDF paper which can be downloaded.

-- Tom