5 ms·

Here is some Russian guys having success in almost fully disabling the Intel ME. http://www.pvsm.ru/informatsionnaya-bezopasnost/262876 http://www.pvsm.ru/info

Here is some Russian guys having success in almost fully disabling the Intel ME. http://www.pvsm.ru/informatsionnaya-bezopasnost/262876 http://www.pvsm.ru/informatsionnaya-bezopasnost/262876 (you can use Google translator from the top of the page, to translate content from Russian to English)

jjawssd 9y ago
https://github.com/corna/me_cleaner https://github.com/corna/me_cleaner
georgecmu 9y ago
Here's the Register write-up on this: https://www.theregister.co.uk/2017/08/29/intel_management_engine_can_be_disabled/ https://www.theregister.co.uk/2017/08/29/intel_management_en... On Monday, Positive Technologies researchers Dmitry Sklyarov, Mark Ermolov, and Maxim Goryachy said they had found a way to turn off the Intel ME by setting the undocumented HAP bit to 1 in a configuration file. HAP stands for high assurance platform. It's an IT security framework developed by the US National Security Agency, an organization that might want a way to disable a feature on Intel chips that presents a security risk. The Register asked Intel about this and received the same emailed statement that was provided to Positive Technologies. "In response to requests from customers with specialized requirements we sometimes explore the modification or disabling of certain features," Intel's spokesperson said. "In this case, the modifications were made at the request of equipment manufacturers in support of their customer's evaluation of the US government's 'High Assurance Platform' program. These modifications underwent a limited validation cycle and are not an officially supported configuration."
- EGreg 9y ago
  "Intel does not and will not design backdoors for access into its products. Recent reports claiming otherwise are misinformed and blatantly false. Intel does not participate in any efforts to decrease security of its technology" We can all rest easy now that Intel has come out and public said this, right?
batat 9y ago
English version in Positive Technologies blog [1] And this has already been added to me_cleaner [2] as --soft-disable option 2 months ago. [1] http://blog.ptsecurity.com/2017/08/disabling-intel-me.html http://blog.ptsecurity.com/2017/08/disabling-intel-me.html [2] https://github.com/corna/me_cleaner/commit/ced3b46ba2ccd74602b892f9594763ef34671652 https://github.com/corna/me_cleaner/commit/ced3b46ba2ccd7460...

jjawssd 9y ago

https://github.com/corna/me_cleaner https://github.com/corna/me_cleaner

georgecmu 9y ago

Here's the Register write-up on this: https://www.theregister.co.uk/2017/08/29/intel_management_engine_can_be_disabled/ https://www.theregister.co.uk/2017/08/29/intel_management_en... On Monday, Positive Technologies researchers Dmitry Sklyarov, Mark Ermolov, and Maxim Goryachy said they had found a way to turn off the Intel ME by setting the undocumented HAP bit to 1 in a configuration file. HAP stands for high assurance platform. It's an IT security framework developed by the US National Security Agency, an organization that might want a way to disable a feature on Intel chips that presents a security risk. The Register asked Intel about this and received the same emailed statement that was provided to Positive Technologies. "In response to requests from customers with specialized requirements we sometimes explore the modification or disabling of certain features," Intel's spokesperson said. "In this case, the modifications were made at the request of equipment manufacturers in support of their customer's evaluation of the US government's 'High Assurance Platform' program. These modifications underwent a limited validation cycle and are not an officially supported configuration."

EGreg 9y ago
"Intel does not and will not design backdoors for access into its products. Recent reports claiming otherwise are misinformed and blatantly false. Intel does not participate in any efforts to decrease security of its technology" We can all rest easy now that Intel has come out and public said this, right?

batat 9y ago

English version in Positive Technologies blog [1] And this has already been added to me_cleaner [2] as --soft-disable option 2 months ago. [1] http://blog.ptsecurity.com/2017/08/disabling-intel-me.html http://blog.ptsecurity.com/2017/08/disabling-intel-me.html [2] https://github.com/corna/me_cleaner/commit/ced3b46ba2ccd74602b892f9594763ef34671652 https://github.com/corna/me_cleaner/commit/ced3b46ba2ccd7460...