Reverse-Engineering the Intel Management Engine
1–10 of 36 posts
Re: Reverse-Engineering the Intel Management Engine
#2I feel like there would be legal problems though...
Re: Reverse-Engineering the Intel Management Engine
#3Hopefully we can get a fully libre boot on purism laptops soon. I feel like there would be legal problems though...
Re: Reverse-Engineering the Intel Management Engine
#4Re: Reverse-Engineering the Intel Management Engine
#5Did the author notify Intel about the bug they found?
When we were rooting Android devices we sat on a lot of exploits that we believed we could use to give end-users freedom. There were a handful that were bad enough to warrant disclosure [1], but we still offered them as ways for users to control their own devices with a few layers of obfuscation on top.
[1] http://www.unrevoked.com/rootwiki/doku.php/public/unrevoked1...
Re: Reverse-Engineering the Intel Management Engine
#6Re: Reverse-Engineering the Intel Management Engine
#7Re: Reverse-Engineering the Intel Management Engine
#8Did the author notify Intel about the bug they found?
Respectfully, why would they? The goal here is to find exploits in ME and use them to make Intel chips more end-user friendly. When we were rooting Android devices we sat on a lot of exploits that we believed we could use to give end-users freedom. There were a handful that were bad enough to warrant disclosure [1], but we still offered them as ways for users to control their own devices with a few layers of obfuscat…
Re: Reverse-Engineering the Intel Management Engine
#9Looks like it can be done through Management Engine, which has access to everything apparently.
Only success so far is unlocking BCLK, but the overclock is small and unstable that way.
Another roadblock was the read only lock, which can fortunately be bypassed on POST on xx67/77 chipsets.
Re: Reverse-Engineering the Intel Management Engine
#10Meanwhile I'm trying to find a way to remove the hard lock on CPU and RAM frequencies (extreme CPUs can't be overclocked, RAM is locked at 1333 MHz) :) Looks like it can be done through Management Engine, which has access to everything apparently. Only success so far is unlocking BCLK, but the overclock is small and unstable that way. Another roadblock was the read only lock, which can fortunately be bypassed on POST…