Live data from Hacker News

Disabling Intel ME 11 via undocumented mode

blog.ptsecurity.com

11–20 of 228 posts

Re: Disabling Intel ME 11 via undocumented mode

#11

If ME is not a backdoor then why doesn't Intel allow to disable it? Why don't they publish detailed descriptions? Why don't they allow user to run their programs on ME CPU?

If ME isn't a backdoor why did Russia and China start efforts to surplant Intel with locally sourced processors (even before US embargo'd Intel from china)

>even before US embargo'd Intel from china

You can see how well this embargo works in every electronics mall

Re: Disabling Intel ME 11 via undocumented mode

#12
The more details leak about ME the more shocking it becomes. Why is this accepted in any free democratic society?

There can be discussions, there can be debates but in everyday life this is already accepted. And even if one does not want to accept it what are the choices given similar technology is now integrated in other processors?

If we accept that computers are essential to operate in modern society then this is akin to a company taking control of the water supply with the ability to stop supply and do other unknown actions with zero accountability.

If you expand this thought this is a kind of fascism. We could be left with a shell of freedom and democracy while the government in partnership with corporates take deeper control of day to day life.

Re: Disabling Intel ME 11 via undocumented mode

#14

TL;DR: Intel put a special High Assurance Platform (HAP) mode in ME for the US government. If toggled on, it disables all non-critical ME functionality. Questioned, Intel responded: > In response to requests from customers with specialized requirements we sometimes explore the modification or disabling of certain features. In this case, the modifications were made at the request of equipment manufacturers in support…

[deleted]

Re: Disabling Intel ME 11 via undocumented mode

#15
post #3
post #2

Rather than assume anything nefarious on the part of the USG, I'm willing to bet a buck that someone in the USG asked the right questions during contract negotiation, which is why this kill switch was added but not publicized to anyone outside participants in the HAP Program.

But maybe that contract negotiation also included a rhetorical question like "And you won't offer this option to other governments, will you?".

I mean, just asking for a feature exclusive to customers with the HAP Program is enough to meet that goal.

Re: Disabling Intel ME 11 via undocumented mode

#16

The more details leak about ME the more shocking it becomes. Why is this accepted in any free democratic society? There can be discussions, there can be debates but in everyday life this is already accepted. And even if one does not want to accept it what are the choices given similar technology is now integrated in other processors? If we accept that computers are essential to operate in modern society then this is…

intel gets asked for features, intel develops them, intel gets paid. you can be sure that intel wouldn't develop ME for free. follow the money.

Re: Disabling Intel ME 11 via undocumented mode

#17
post #15
post #3

Earlier quoted context omitted.

But maybe that contract negotiation also included a rhetorical question like "And you won't offer this option to other governments, will you?".

I mean, just asking for a feature exclusive to customers with the HAP Program is enough to meet that goal.

I think it's worth considering what sort of incentives are created by such a deal.

Re: Disabling Intel ME 11 via undocumented mode

#19
post #11

Earlier quoted context omitted.

If ME isn't a backdoor why did Russia and China start efforts to surplant Intel with locally sourced processors (even before US embargo'd Intel from china)

>even before US embargo'd Intel from china You can see how well this embargo works in every electronics mall

It isn't a blanket sanction, just against government and computing centers. The last 3 chinese super computers have used home grown FeiTeng RISC processors which were binary compatible to Itanium, but for new models their using OpenSPARC.

Re: Disabling Intel ME 11 via undocumented mode

#20
post #5

The interesting question here is: why undocumented. It was created on request, but nobody was told. Who pushed so hard ME to be on for everything but them? And why? We know the answer :)

Intel's response to the authors kind of explains it: they added this feature hastily to meet specific requirements of the HAP program and didn't fully validate it – so it's not supported.
Post reply on HN