3 ms·

Is it? CompuTrace and Intel AT would like to have a word with you. As do Dell, Samsung, Sony and Lenovo. Sure, their entry level consumer goods tend to have tha

Is it? CompuTrace and Intel AT would like to have a word with you. As do Dell, Samsung, Sony and Lenovo. Sure, their entry level consumer goods tend to have that mostly implemented in software, but even base tier business products have this. As does every Windows 10 version from Pro and up. Your broadening of the scope really doesn't help. We could make it more interesting. Put an AMD EPYC CPU you own into a Dell server, then take it out and put it in a different server. CPU no longer works, because it's now cryptographically tied to Dell. AMD won't help you, and neither will Dell. And it's not just AMD and Dell that implement this. Are they at fault? Not really, you should have RTFM. But there is nobody that can 'fix' this for you. Maybe that's not interesting to you, so we could move on to LTE infrastructure, or car radios or HAM radios. Or maybe that's no fun and you'd rather talk about the CI interface on your TV. Or maybe you don't have that and then we can find something else if need be. Or, we could scope it back to what it is about: Activation Lock that the owner of the device can enable and disable with their credentials, and it should not be something that someone else can bypass, otherwise the feature is worthless.

jojobas 3y ago
Computrace is just another rootkit that you might or might not want to install on your hardware. Intel AT has been discontinued since 2015, good riddance. Only a handful of laptop vendors ever had the chutzpah to have the rootkit preinstalled on sale, and only Apple currently has the preinstalled rootkit in firmware. >Are they at fault? Yes, they are at fault of being customer-hostile. >should not be something that someone else can bypass That would make sense if the credential was on a piece of paper sold with the laptop, rather than in the vendor's database somewhere. Still any laptop is fundamentally open to an evil maid attack, so anything past encrypting your hard drive is mostly crap.
- oneplane 3y ago
  That's a pretty bleak and somewhat unrealistic outlook. And just because they are 'another rootkit' or 'discontinued' (which I already mentioned) doesn't mean they aren't existing examples. As for your statement about being customer-hostile: I disagree. I do not want an Activation Lock that someone else can bypass. Call that what you want, but to me that's a feature, not a bug. The fact that there was a mistake made doesn't mean the whole system is therefore bad. And it also doesn't mean that suddenly it's open to an evil maid attack either (where the heck did that come from?). It's almost like you are completely unfamiliar with root of trust, public-key cryptography and secure enclaves. While nothing is perfect, having a hardware root-of-trust (like Intel ACM kickstarts everything else, Apple's SEP, AMD's AGESA, or ARMs TrustZone) means you can actually prevent evil maid attacks. So far, out of the ~100 different SEP implementations Apple had, only 2 had enough flaws to be bypassed, and those are decades old by now. That's a pretty good trackrecord. Your statement about no other vendors having pre-installed 'rootkits' (they are not rootkits, they are not hidden from any kernel), is wrong again. The products and vendors I described two comments ago have this. You can buy this right now. And with your mentality, you'd call Windows Autopilot a rootkit as well. All of this together leads me to believe you're just angry at something and not really living in the same world as the rest of us.

jojobas 3y ago

Computrace is just another rootkit that you might or might not want to install on your hardware. Intel AT has been discontinued since 2015, good riddance. Only a handful of laptop vendors ever had the chutzpah to have the rootkit preinstalled on sale, and only Apple currently has the preinstalled rootkit in firmware. >Are they at fault? Yes, they are at fault of being customer-hostile. >should not be something that someone else can bypass That would make sense if the credential was on a piece of paper sold with the laptop, rather than in the vendor's database somewhere. Still any laptop is fundamentally open to an evil maid attack, so anything past encrypting your hard drive is mostly crap.

oneplane 3y ago
That's a pretty bleak and somewhat unrealistic outlook. And just because they are 'another rootkit' or 'discontinued' (which I already mentioned) doesn't mean they aren't existing examples. As for your statement about being customer-hostile: I disagree. I do not want an Activation Lock that someone else can bypass. Call that what you want, but to me that's a feature, not a bug. The fact that there was a mistake made doesn't mean the whole system is therefore bad. And it also doesn't mean that suddenly it's open to an evil maid attack either (where the heck did that come from?). It's almost like you are completely unfamiliar with root of trust, public-key cryptography and secure enclaves. While nothing is perfect, having a hardware root-of-trust (like Intel ACM kickstarts everything else, Apple's SEP, AMD's AGESA, or ARMs TrustZone) means you can actually prevent evil maid attacks. So far, out of the ~100 different SEP implementations Apple had, only 2 had enough flaws to be bypassed, and those are decades old by now. That's a pretty good trackrecord. Your statement about no other vendors having pre-installed 'rootkits' (they are not rootkits, they are not hidden from any kernel), is wrong again. The products and vendors I described two comments ago have this. You can buy this right now. And with your mentality, you'd call Windows Autopilot a rootkit as well. All of this together leads me to believe you're just angry at something and not really living in the same world as the rest of us.