The Intel ME subsystem can take over your machine, can't be audited

#1

Post by cylo » Thu, Jun 16, 2016, 1:25 AM UTC

The Intel ME subsystem can take over your machine, can't be audited
boingboing.net

Re: The Intel ME subsystem can take over your machine, can't be audited

#2

Post by morganvachon » Thu, Jun 16, 2016, 3:14 AM UTC

Nice breakdown of how ME works, but nothing new here.

Still, I'm glad I hold on to a ton of older, pre Core i-series Intel machines, AMD machines, and ARM boards. If ME is ever truly compromised at least I have a fallback or three.

Re: The Intel ME subsystem can take over your machine, can't be audited

#3

Post by yuhong » Thu, Jun 16, 2016, 3:23 AM UTC

morganvachon wrote: post #2

Nice breakdown of how ME works, but nothing new here. Still, I'm glad I hold on to a ton of older, pre Core i-series Intel machines, AMD machines, and ARM boards. If ME is ever truly compromised at least I have a fallback or three.

Indeed, there was another recent HN thread on this: https://news.ycombinator.com/item?id=11880935

Re: The Intel ME subsystem can take over your machine, can't be audited

#4

Post by optimiz3 » Thu, Jun 16, 2016, 3:25 AM UTC

Serious question: are AMD chips a viable alternative (from a security standpoint)? I hear their new Zen chips are coming soon.

Re: The Intel ME subsystem can take over your machine, can't be audited

#5

Post by yuhong » Thu, Jun 16, 2016, 3:26 AM UTC

optimiz3 wrote: post #4

Serious question: are AMD chips a viable alternative (from a security standpoint)? I hear their new Zen chips are coming soon.

AMD PSP don't have access to the network (as far as I know).

Re: The Intel ME subsystem can take over your machine, can't be audited

#6

Post by williadc » Thu, Jun 16, 2016, 3:30 AM UTC

optimiz3 wrote: post #4

Serious question: are AMD chips a viable alternative (from a security standpoint)? I hear their new Zen chips are coming soon.

Not really: http://www.amd.com/en-us/innovations/software-technologies/s...

Re: The Intel ME subsystem can take over your machine, can't be audited

#7

Post by LeoPanthera » Thu, Jun 16, 2016, 3:37 AM UTC

Does this apply to Macs?

Re: The Intel ME subsystem can take over your machine, can't be audited

#8

Post by yuhong » Thu, Jun 16, 2016, 3:38 AM UTC

LeoPanthera wrote: post #7

Does this apply to Macs?

I think it applies to everything using Intel processors.

Re: The Intel ME subsystem can take over your machine, can't be audited

#9

Post by Khalos » Thu, Jun 16, 2016, 3:41 AM UTC

LeoPanthera wrote: post #7

Does this apply to Macs?

From the article:

"On some chipsets, the firmware running on the ME implements a system called Intel's Active Management Technology (AMT). This is entirely transparent to the operating system, which means that this extra computer can do its job regardless of which operating system is installed and running on the main CPU."

So it sounds like yes, this would effect any OS.

Re: The Intel ME subsystem can take over your machine, can't be audited

#10

Post by JumpCrisscross » Thu, Jun 16, 2016, 3:45 AM UTC

Khalos wrote: post #9

LeoPanthera wrote: post #7

Does this apply to Macs?

From the article: "On some chipsets, the firmware running on the ME implements a system called Intel's Active Management Technology (AMT). This is entirely transparent to the operating system, which means that this extra computer can do its job regardless of which operating system is installed and running on the main CPU." So it sounds like yes, this would effect any OS.

I think they are asking if Apple ordered chips without this ME, give the former's penchant for security. I wonder similarly.