3 ms·
But once again they have included a second "processor" on each chip with a bunch of restricted backdoors that can not be removed [1]. There have already been bu
by turblety 9y ago
But once again they have included a second "processor" on each chip with a bunch of restricted backdoors that can not be removed [1]. There have already been bugs [2] and exploits [3] found and therefore no Intel or AMD chip can be used if you care about security and/or privacy.
If I think Microsoft isn't free enough for me, then I can remove Windows and install Linux (or BSD). If I think Chrome is sending my data to Google, then I can remove it and install Firefox.
But if don't like that Intel can take over my PC at any time, watch my screen, log my keystrokes, prevent me from installing another operating system, manipulate what I see on the screen, and much much more, then there is nothing I can do. I can not remove the second chip or remove the code. I must have a proprietary blob [4] (of who's source code no one can see to audit) running on my Intel PC.
But the worst thing has to be Intel and AMT's complete refusal to provide a clean chip to companies that are trying to provide backdoor free computers. Look at http://puri.sm http://puri.sm [5] for example. They are trying to provide a PC that does not restrict what operating system or BIOS you run, and have repeatedly contacted Intel to ask them to provide a batch of chips with no ME or AMT installed. Even Google, which sells millions of chromebooks (coreboot preinstalled) have been unable to persuade them. [6]
As Intel and AMT are the biggest players and arguably a monopoly of the microprocessor market, they have a responsibility to provide safe and clean processors that customers can truly own. Please try your best not to buy these products until they resolve these issues.
[1] https://libreboot.org/faq.html#intelme https://libreboot.org/faq.html#intelme
[2] https://www.theregister.co.uk/2017/05/01/intel_amt_me_vulnerability/ https://www.theregister.co.uk/2017/05/01/intel_amt_me_vulner...
[3] https://www.intel.com/content/www/us/en/architecture-and-technology/intel-amt-vulnerability-announcement.html https://www.intel.com/content/www/us/en/architecture-and-tec...
[4] http://boingboing.net/2016/06/15/intel-x86-processors-ship-with.html http://boingboing.net/2016/06/15/intel-x86-processors-ship-w...
[5] https://puri.sm/learn/intel-me/ https://puri.sm/learn/intel-me/
[6] https://libreboot.org/faq.html#intel-is-uncooperative https://libreboot.org/faq.html#intel-is-uncooperative
- kennydude 9y agoThing is they could have implemented that in a half-open manner. Sign and hash releases, and post the code openly. So you can view the code, verify it's what is installed but for security purposes can't change it. The way this reads it seems deliberately suspicious. Having a HTTP server so low in the hardware stack feels wrong.
- qb45 9y agoWell, it doesn't have to be HTTP but you do need some sort of server low in the hardware to control the machine remotely. Such things have existed for many years in servers, now Intel integrates them in chipsets for corporate PCs too.
- qb45 9y agoWho is AMT? I thought AMT is just Intel's marketing name for certain remote management features. Also, I'm under impression that [6] refers not only to firmware blobs running on various auxiliary coprocessors but also the machine's firmware, i.e. BIOS, and in particular the CPU initialization component which had been provided only in binary form by both Intel and AMD for a few years now.
- turblety 9y agoSorry, my mistake. I should take better care of my writing. I should have written AMD instead of AMT. I cannot edit my post. AMT is the poorly written and proprietary firmware Active Management Technology. This allows you to remotely control a computer. AMD is a company and competitor to Intel.
- Shorel 9y agoWhat you say is absolutely true, but I don't think there's any reasonable alternative if one wants to have an X86 fast compatible processor nowadays. I myself am thinking of buying one of these new AMD processors.