3 ms·
>e stuff is already there, running, listening, and able to do things. I didn't see anything in the presentation that corroborates with what you said. Do you ha
by ksk 9y ago
>e stuff is already there, running, listening, and able to do things.
I didn't see anything in the presentation that corroborates with what you said. Do you have any other links that show that ME is automatically provisioned/enabled?
>The difference between this and all those peripherals you brought up is that we wanted the peripherals because they were useful to us.
They were advertised for their features, not for their internal components. No person buying a GPU imagines that malware can reside inside their GPU. Similarly no person buying a USB drive imagines that the USB drive's controller can be reprogrammed to do nefarious things.
>Also, we have options with those ranging from not buying the peripheral to using one with little programmability to isolating it with IO/MMU.
The point is that you are not aware of all of the places microcrontrollers are hiding currently, which are therefore easier to conceal because nobody (well, almost) is paying attention to them. Intel created a product which they announced to the world, and have released a lot of technical information on. You are insisting that Intel has an ulterior motive without providing any evidence, when far simpler explanations exist that make sense. I'm going to withhold judgement till I see such evidence.
- ac29 9y ago>Do you have any other links that show that ME is automatically provisioned/enabled? I think you are confusing Intel's AMT with the ME. AMT is a ME application, and has to be enabled/provisioned. The ME, in general, can do other things, such as crytographically verifying boot firmware is correctly signed (aka BootGuard/Secure Boot/Verified Boot, and probably other names). Some vendors even allow you to add your own signing keys. Some more info here: https://libreboot.org/faq.html#intelme https://libreboot.org/faq.html#intelme
- ksk 9y agoYes, I was using the terms carelessly. I'll try to be more mindful :) But I think the AMT technology is what the parent poster was referring to in their original and subsequent comments. >That CPU has a network stack, web server, and what seems to be hackable software. >Nah, the stuff is already there, running, listening, and able to do things. From what I have read, the AMT portion is required to do all of the above. Its the AMT portion that handles the KVM over IP (VNC), Serial over IP, etc.