6 ms·
Sure, but does the separate co-processor needs access to network stack? for a typical end user? definitely not.
by Xelbair 4y ago
Sure, but does the separate co-processor needs access to network stack? for a typical end user? definitely not.
- bragr 4y agoIt does if you want remote management, which almost every IT department does.
- boppo1 4y agoCan we not have separate enterprise and individual classes of processor?
- ranger207 4y agoHeck, ECC is already market-segregated
- bubblethink 4y agoThis is also segmented. The remote management stuff is marketed as vpro which is not available in all SKUs. However, all Intel processors need the ME.
- vetinari 4y agoWe do, sort of. In order to have network access, Intel Management Engine is not enough, it does not have full network access at all. You need Intel AMT (also marketed as "vPro"), and that one is paid extra. With CPUs featuring such support being separate SKUs, so you would definitely know -- and you can check in ark. You also need to pair it with Intel ethernet or wifi, any other network interface is not good enough. So here you have it, your separate class of processor.
- wmf 4y agoConsumer PCs already don't have vPro/AMT, although Intel can't afford to make separate hardware so there's a concern that the out-of-band hardware path could be activated later by malware.
- Spooky23 4y agoWe do. Every time this topic comes up, everyone gets angry about something that doesn’t affect them, at all.
- salawat 4y ago...And which almost every pther computer decidedly does not, and more problematically, every other computer user has no visibility into the configuration, implementation details, or actual specs of said highly privileged component. It's one thing to have it, but if it sits out of my reach, sorry hoss, I just don't trust you that much, and the fact you and your buddies all do it and are the only shops in town doesn't make me feel any better.
- chasil 4y agoNo IT department wants their remote management at BlackHat. https://www.runzero.com/blog/ilo-vulnerabilities/ https://www.runzero.com/blog/ilo-vulnerabilities/ I'm not sure that iDRAC is much better; haven't checked lately.
- snuxoll 4y agoAt least with IPMI interfaces on servers they have a dedicated NIC port you can put on a restricted network.
- deleted 4y ago[deleted]
- goodpoint 4y agoThis is plain false.
- deleted 4y ago[deleted]
- nullc 4y agoIs any remote management system available to the public using the ME stuff on consumer systems? I haven't seen it. And when you look at server hardware the have completely different backdoor facilities. It really looks like pure pretext, especially since there isn't just a simple bios option to comprehensively and completely disable it.
- wmf 4y agohttps://www.meshcommander.com/ https://www.meshcommander.com/