3 ms·
Don't rush to apply the Intel ME patch! Several HN users here (beefhash, jlgaddis, joe_the_user) have raised the possibility that applying the patch might make
by computator 9y ago
Don't rush to apply the Intel ME patch!
Several HN users here (beefhash, jlgaddis, joe_the_user) have raised the possibility that applying the patch might make it impossible to get rid of the Intel ME entirely.
If you don't apply the patch, someone may come up with a nice new exploit (using the security bugs) to completely remove the Intel ME.
If you do apply the patch, it might close off possible exploits and you'll be left with an Intel ME that's impossible to remove.
- nullc 9y agoRight now to remove ME you need to connect an external flash programmer. It seems really unlikely that anything they do with a firmware update will be able to block that at least if someone can get a pre-change image. Maybe there is a way to reprogram to disable ME without the flash programmer which these fixes may block. If my laptop weren't already ME disabled, I'd probably apply the fixes.
- pas 9y ago> .. can get a pre-change image. Isn't there an "eFUSE-like" counter that prevents firmware rollback?
- beefhash 9y agoWhile we're on the topic -- is there some IRC channel or something dedicated to Intel ME research?
- exikyut 9y agoGood question. I'm not aware of any; I say make one. The question is what the best IRC server would be to use; considerations include reputation and "unpopularity", ie certain overly busy networks may scare some people away. There's also the possibility of using Discord. The main issue is encryption; most won't have any opinions on the subject, but more vocal types who may be useful to have on board may insist on specific forms of security in order to participate. Just my 2c
- nullc 9y agoWell I just created ##intelme on freenode. Though, I'm just a nobody whos managed to get his laptop me_cleanered. Feel free to join.