4 ms·
Both Facebook and Google are working at disabling ME. They make no secret that they not trust it. NSA & other US orgs receive hardware without ME already. Sur
by eeZah7Ux 9y ago
Both Facebook and Google are working at disabling ME. They make no secret that they not trust it.
NSA & other US orgs receive hardware without ME already.
Surveillance is for the rest of us.
- ksk 9y ago>Surveillance is for the rest of us. Who has been spied on using Intel ME?
- AstralStorm 9y agoIt requires some serious web traffic analysis and honeypot to detect the attempt. That is assuming they would use remote access and not use ME locally. That would be even harder to prove once the malware uninstall itself.
- ksk 9y agoYeah, I fully understand that its not easy to detect this. But I'd also like to make an informed decision based on evidence, not speculation. So far I've seen bugs being reported that require the user to enable and provision AMT, which are quite serious, but entirely avoidable by keeping it disabled. Anyway, I'm happy to read more about it if you have any additional info.
- eeZah7Ux 9y agoIn security we work on addressing vulnerabilities, reducing the attack surface, prevention and so on. We don't wait for evidence that a vulnerability is being exploited. This is especially true for cryptography where a cryptosystem used today has to resist theoretical attackers that can use hardware that will exists in decades from now.
- ksk 9y agoSorry, I can't understand what point you're replying to. To me, it sounded like you claimed it was being used for surveillance. I'm happy to go through the evidence if you have any.
- confounded 9y ago> Both Facebook and Google are working at disabling ME. They make no secret that they not trust it. I'm aware of Google's work with Coreboot and Chromebooks, but not Facebook's. Can you tell us anything?
- bonzini 9y agoI think he's referring to the Open Compute Project.
- bubblethink 9y agoI don't know of fb's direct involvement in any ME related stuff, but they do develop openbmc which is a replacement for proprietary bmc firmware. BMC isn't quite as nefarious as ME though, and is optional anyway.