5 ms·
> We believe that this mechanism is designed to meet a typical requirement of government agencies, which want to reduce the possibility of side-channel leaks.
by kogepathic 9y ago
> We believe that this mechanism is designed to meet a typical requirement of government agencies, which want to reduce the possibility of side-channel leaks.
Interesting that Intel will provide this to the US government for enough money, but wouldn't offer it as an additional $50 or $100 option for end-customers to disable the ME.
I think there are probably enough privacy conscious people who would be willing to buy a Skylake or newer platform from Intel if they could easily disable the non-BUP components of the ME for a reasonable fee.
- dingo_bat 9y ago$50 or $100 for turning off the spyware in my own CPU is hardly reasonable.
- daxorid 9y agoSure it's unreasonable, but at least charging for it would be better, and make more business sense, than the current "Fuck You, Plebe" they offer to us prisoners of the FVEY panopticon.
- onli 9y agoYou are seeing this wrong. Intel has two reasons to have ME: 1. It is useful in business settings 2. It enables the US spy agencies complete surveillance of all PCs It's the second point that explains why they can't make it optional. And that makes business sense. That way they ensure backing from the NSA, instead of having to fight against them.
- codedokode 9y agoIt can be useful for other purposes too, for example for enforcing DRM so that DRM code runs on a ME engine. And of course DRM code can be backdoored too so playing a specially crafted video would run code from it.
- cyphar 9y agoIntel ME is not an effective DRM scheme. You need to be exceptionally careful when you mention DRM, because if it becomes commonly believed that Intel ME could be used to implement DRM all of a sudden the DMCA comes into play. Research into Intel ME vulnerabilities becomes a federal crime.
- owenmarshall 9y agoThis isn't necessarily true: https://www.ftc.gov/news-events/blogs/techftc/2016/10/dmca-security-research-exemption-consumer-devices https://www.ftc.gov/news-events/blogs/techftc/2016/10/dmca-s... Of the four criteria in the exemption, I wouldn't put it past the government trying to make the case that exposing a NSA spy program somehow falls afoul of good faith investigation - but the general view that "any DRM research is a crime" is no longer accurate.
- cyphar 9y agoThe good-faith requirement also means that likely you could not publish a way for someone to disable the "effective anti-circumvention measure". Even if you could, anyone who used that research to disable their own devices is arguably not conducting "good faith security research". While researchers might be safe, nobody will be able to use the results of their research legally except the companies that produce DRM (so that they can make it more secure). I don't think that's actually an improvement to be honest.
- the8472 9y ago> Intel ME is not an effective DRM scheme. The PAVP module is part of the ME firmware. Which means the management engine is, among other things, a DRM implementation. https://en.wikipedia.org/wiki/Intel_GMA#Protected_Audio_Video_Path https://en.wikipedia.org/wiki/Intel_GMA#Protected_Audio_Vide... https://recon.cx/2014/slides/Recon%202014%20Skochinsky.pdf https://recon.cx/2014/slides/Recon%202014%20Skochinsky.pdf (page 17)
- kogepathic 9y ago> because if it becomes commonly believed that Intel ME could be used to implement DRM all of a sudden the DMCA comes into play It is already common knowledge that the ME is used to implement DRM. The DRM functionality of the ME has been discussed in several books. [0] The ME contains DRM functions to securely decode content (e.g. streaming video) in a way such that decoded content cannot be snooped by the host processor before it is displayed to the user (ostensibly via a secure channel like HDCP). [0] http://www.apress.com/us/book/9781430265719 http://www.apress.com/us/book/9781430265719