Live data from Hacker News

20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

twitter.com

81–90 of 476 posts

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#82
post #11

At a previous workplace we had a few places in the code which used the word backdoor. It was not an actual backdoor though, but merely a debugging server that could be enabled and allowed you to inspect internal state during runtime. At some point I removed the word backdoor, fearing it would get to a customer or during an audit someone would misunderstand. :|

At my previous employer our code was littered with references to a backdoor. It was a channel for tools running in guest operating systems to talk to the host hypervisor through a magic I/O port.

It's even openly called "backdoor" in open source code directly related to it: https://github.com/vmware/open-vm-tools/blob/master/open-vm-...

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#83

Earlier quoted context omitted.

You can't download from mega.nz unless you have their "downloader" app or an account, or if you have Firefox or Safari. It's useless. The torrent works.

A web app that only works in non-Chromium browsers isn't useless.

I've downloaded stuff from MEGA in the last week on a Chromium based browser, so I'm not sure what the problem is supposed to be here.

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#85
post #41

Fingers crossed that this will enable some smart person to completely disable the management engine.

AFAIK the ME is required to initialize the processor so it can never be completely disabled. The best you could do is remove any code beyond necessary initialization which has mostly already been done by me_cleaner.

How easy is it to use me_cleaner? Last time I looked it required some wiring and a Raspberry Pi.

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#87
post #14

Someone have a mirror? Seems the actual files are here: https://t.me/exconfidential/590 Edit: files are here https://mega.nz/folder/CV91XLBZ#CPSDW-8EWetV7hGhgGd8GQ or magnet:?xt=urn:btih:38f947ceadf06e6d3ffc2b37b807d7ef80b57f21

"Invalid magnet URI" from rtorrent

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#90
post #28

Earlier quoted context omitted.

Is the person publishing this liable or just their source? Because this seems to be a hobby for the person publishing it and yet they also aren't concealing their identity. They list their former employer on their website.

More likely the person publishing this isn't aware of the far reaching consequences.

You should look up Till Kottman's other work. Very aware.
Post reply on HN