|
|
Subscribe / Log in / New account

Disabling Intel ME 11 via undocumented mode (Positive Technologies)

Disabling Intel ME 11 via undocumented mode (Positive Technologies)

Posted Aug 30, 2017 16:01 UTC (Wed) by mjg59 (subscriber, #23239)
In reply to: Disabling Intel ME 11 via undocumented mode (Positive Technologies) by nix
Parent article: Disabling Intel ME 11 via undocumented mode (Positive Technologies)

Yeah I think I was being overly pedantic - enterprise Xeons run the SPS stack rather than the ME stack, but there's still something implementing much the same functionality (though I don't think PTT or protected media path are typically provided on those boards?)


to post comments

Disabling Intel ME 11 via undocumented mode (Positive Technologies)

Posted Aug 30, 2017 19:04 UTC (Wed) by rahvin (guest, #16953) [Link]

I believe what your talking about is the interface software not the underlying ME in the CPU. Every Intel CPU since 2008 has included an ME and only Intel knows what is running on it or if it varies between chips because it's not open source and Intel doesn't release any details about it.

Which is part of the reason it's such a major security vulnerability. It's unknown and untested code running on a CPU the user has no control over that has DMA access and can override the main CPU. It can copy any data off the system and send it wherever it wants and the only way to block it would be to firewall it externally because the host OS would never see the communication. I understand the Enterprise idea behind these things but the code should be open source and updateable because there is as big of a security vulnerability here than there is in the awful IPMI BMC linux stacks that are out there. One of these days the Blackhats are going to start probing these things and I have no doubt there is going to be vulnerability after vulnerability that's going to allow blackhats to take completely control of connected computers. It will make the Mirari botnet look like childs play.


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds