7 ms·
Yet, still as scary and relevant today.
by mjevans 6y ago
Yet, still as scary and relevant today.
- panny 6y agoMore scary is how people in tech circles still call you paranoid when you call Intel ME/AMD PSP a backdoor. >We are also always open for ideas but our focus is on firmware, BIOS, BUS or driver level attacks. Anyone on WiFi AC or up are backdoored right now by NSA. All of them are compromised, no doubt in my mind. All the LTE. All the x86 hardware on the market. All of it. If you aren't running fully free software, you're affected. And if you are a rare case running fully free software, you're an easy target for interdictions, since there's so few of you.
- SlavikCA 6y agoHow does "running fully free software" helps alleviate "compromised x86"?
- waihtis 6y agoWrap up that fully free software with LibreBoot and you're good to go!
- marcosdumay 6y agoWrap with LibreBoot, replace all the non-free firmware, check your hardware on a microscope against embedded backdoors, oh, and don't forget to verify your stack's source and your building environment. But, well, you can stop at your CPU's manufacturer website, where you will find ME/PSP, well documented as a backdoor. It will save you the trouble of verifying the hardware and firmware.
- panny 6y agoIf you're running fully free software, you're not running x86, since it can't boot without backdoored binary blobs.
- Thorrez 6y agoWhat about Libreboot? Doesn't that allow booting x86 without binary blobs?
- j88439h84 6y agoCan you provide some evidence for these claims?
- panny 6y agoSnowden docs have been available for years. ShadowBrokers. Just this week a 20GB dump of private Intel source was dumped with backdoors included. It is beyond a reasonable doubt that x86 hardware has NSA backdoors in it. You're now sitting on a time bomb. Remember when the NSA tools were dumped with their secret Windows exploits? WannaCry? North Korea picked that up and launched ransomware attacks. That's the sort of thing that's going to happen again with the newly published Intel backdoors. Just wait and see. Tim Cook is 100% vindicated this week about not adding intentional iPhone backdoors.
- j88439h84 6y agoI don't remember WiFi or CPU backdoors in Snowden, ShadowBrokers, or Intel 2020. Unless by "backdoor" you just mean NSA holds zero days on various important technologies, which is reasonably likely given EternalBlue. Is that what you mean?
- DarthGhandi 6y agoThey don't need 0days when they can just easily corrupt the standards process. They've been doing it everywhere. The Wifi Alliance has made some heinously bad choices that if you attributed to incompetence simply make no sense, they treat anyone who questions them with disdain and shoots down attempts to fix the mess they make. WPA3 was hilariously broken a month after getting rolled out.
- numpad0 6y agoI can’t wait for those ME/PSP program to become declassified, because I have zero doubt it’s an op and someone’s going to do it. It’ll be exciting just as A-12/SR-71 docs!
- garmaine 6y agoThey will never be declassified.
- deleted 6y ago[deleted]