3 ms·
AMD has the PSP which basically is the same thing. But we don't know for sure what either one does.
by std_throwaway 8y ago
AMD has the PSP which basically is the same thing. But we don't know for sure what either one does.
- mrsteveman1 8y agoOne thing the PSP doesn't have is AMT style remote management. AMD has their own kind of management system available on some machines (DASH, using "smart" NICs like Broadcom), but the PSP isn't even involved when DASH is available and in use, as far as I know. However, on my Intel machine with AMT, there's a network port opened by the ME itself (TCP/16992). It can use the same IP as the main OS, or a different IP entirely if desired. It uses the same ethernet port as the main OS though, splitting the packets that are directed to one of the ME ports and selectively allowing the rest to continue to the main OS (there's a low-level ME firewall[1]). On that port, there is a full remote desktop with mouse and keyboard, the ability to remotely connect small drives and/or ISO files, a remote serial console, a low level firewall configuration utility, and power/reboot controls. Even on machines where AMT is not even supposed to be available, there have been PoC demonstrated using one of the ME flaws to turn it back on[2]. [1] https://i.imgur.com/Wphopk1.jpg https://i.imgur.com/Wphopk1.jpg (slide 68) [2] https://www.blackhat.com/docs/eu-17/materials/eu-17-Goryachy-How-To-Hack-A-Turned-Off-Computer-Or-Running-Unsigned-Code-In-Intel-Management-Engine.pdf https://www.blackhat.com/docs/eu-17/materials/eu-17-Goryachy...
- iknowverylittle 8y agoYou know the shame of ME is that the concept and intended use isn't terrible and the engineering behind it is rather cool. It is however unfortunate how poorly Intel implemented it and essentially forced it onto personal systems that have no need for it to begin with.
- mmjaa 8y agoIt just should not be there unless requested by the customer. Period.