“We have obtained fully functional JTAG for Intel CSME via USB DCI”
1–10 of 413 posts
Re: “We have obtained fully functional JTAG for Intel CSME via USB DCI”
#2Any reason Intel doesn't just offer IME-free CPUs too? There's obviously interest considering the lengths organisations like Google go to to disable it and Intel supposedly already has such offers for governments.
Re: “We have obtained fully functional JTAG for Intel CSME via USB DCI”
#3Can someone explain like I have a degree in computer science from a good university, but opted for a career as a software engineer in some relatively high level languages?
Re: “We have obtained fully functional JTAG for Intel CSME via USB DCI”
#4Can someone explain like I have a degree in computer science from a good university, but opted for a career as a software engineer in some relatively high level languages?
I don't understand your question. Please clarify.
Re: “We have obtained fully functional JTAG for Intel CSME via USB DCI”
#5Discussed previously here: https://news.ycombinator.com/item?id=15656931
Re: “We have obtained fully functional JTAG for Intel CSME via USB DCI”
#6This particular submission is a dupe: https://news.ycombinator.com/item?id=15656931
This one has a bit more info (although not much as far as details go): https://news.ycombinator.com/item?id=15668363
Re: “We have obtained fully functional JTAG for Intel CSME via USB DCI”
#7Can someone explain like I have a degree in computer science from a good university, but opted for a career as a software engineer in some relatively high level languages?
If I got it right, they got a debugger access to the processor that runs ME, via an USB port.
So they can mess with ME (dump its code, analyze it, observe how it runs, modify it live) as they see fit.
Re: “We have obtained fully functional JTAG for Intel CSME via USB DCI”
#8Can someone explain like I have a degree in computer science from a good university, but opted for a career as a software engineer in some relatively high level languages?
I'll give a try. Someone else can correct me later. These guys have used a JTAG f debugging dongle to access the Intel management engine. They can now read every bit of code. Which means that secrets stored within the code including keys and bugs are available to them and anyone who can replicate their work. Since the management engine is in nearly all of Intel chips, we're screwed.
AMD have something similar so no help there.
Re: “We have obtained fully functional JTAG for Intel CSME via USB DCI”
#9Good.
Re: “We have obtained fully functional JTAG for Intel CSME via USB DCI”
#10On an unrelated note, did anyone hear about any answer from Intel to Prof. Tanenbaum's open letter? It's high time they pulled their heads out of the sand and started explaining the whole issue.