CPU backdoors

Do any of you care about the fact that all modern micro-processors from Intel and AMD are backdoored?

E.g. Intel management engine allows signed code to hijack every component of your hardware. It's like a segmented, hidden part of the processor solely dedicated towards "updates" and you can't turn it off. So even Linux fags using whole disk encryption are still vulnerable.

Also, rebuttal to the "but I have nothing to hide" argument: papers.ssrn.com/sol3/papers.cfm?abstract_id=998565


ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf
this is also a good paper related to this subject
>if no backdoor in your software, compiler probably implemented one
>if no backdoor implementing compiler then your hardware probably implemented one

Other urls found in this thread:

arstechnica.com/security/2013/12/scientist-developed-malware-covertly-jumps-air-gaps-using-inaudible-sound/
extremetech.com/computing/171949-new-type-of-audio-malware-transmits-through-speakers-and-microphones
threatpost.com/dragos-ruiu-on-the-badbios-saga/102823/
thepiratebay.org/torrent/16094008/Black.Mirror.S03E06.720p.WEBRip.X264-DEFLATE[ettv]
ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf
hardenedlinux.org/firmware/2016/11/17/neutralize_ME_firmware_on_sandybridge_and_ivybridge.html
blog.kaspersky.com/equation-hdd-malware/7623/
twitter.com/SFWRedditVideos

Nice
Did you know all modern AMD have a ARM co processor for "power management and microcode updates"
Did you know that modern Intel chips for laptops have a sound analyzer built in

No.

can you into STUX?

Stallman was right

Spend enough time in the IT industry and you'll realize that there's nothing you can do short of design and forge your own micro-architecture to get away from back doors, keylogging, spyware, etc. Security is a sham. Linux is a sham. Either use technology and be spied on or don't use technology and live in the woods. Those are your only two options and sadly, there's no hope that will change any time soon.

migrant from Sup Forums here.
this is mostly intel vPro processors. some others may have administrative backdoors but do your homework when buying and use a firewall appliance for your home network. it's your responsibility to enforce your privacy and if you don't take it seriously you can't expect anyone else to.

Thankfully it seems they use such things only against very high value targets. Even if you're a wanted criminal you're most likely pretty safe.

There is in fact
Isolation is key
Your CPU might spy on you
But if it can't connect

>Do any of you care about the fact that all modern micro-processors from Intel and AMD are backdoored?

Well what are we going to do about it? There's no real alternative processors available, it's not like we can all go and buy those Libreboot laptops.

>But if it can't connect
they have already demonstrated multiple ways of transferring data from computer to other computers in proximity without being connected to any network.

Most people are not smart enough to do that. A small minority even knows that is an option.

Like I said
Isolation
Physical isolation
Sound barriers
Lead walls

Snowden was a plant

Is a libreboot thinkpad still viable?

we're doomed. nice digits.

Well boys
Kek has spoken
Isolate your computers

I really don't like living in the woods but if kek wills it...

it's true there is now "theoretical" malware that can get on air gaped computers so nothing is safe.
you might as well just give into multiple zero day infections on you PC at all time if you're using a Microsoft or Macintosh OS

FPGAs are the future. Partially randomized soft CPU layouts

No they're really not
They're useful but not for desktop computing

This is interesting. Where did you hear about this?

>So even Linux fags using whole disk encryption are still vulnerable.
HDDs are backdoored too.

explain

arstechnica.com/security/2013/12/scientist-developed-malware-covertly-jumps-air-gaps-using-inaudible-sound/

and then viruses using these techniques started appearing in the wild

extremetech.com/computing/171949-new-type-of-audio-malware-transmits-through-speakers-and-microphones

Like I said, the future. Not the present.

I follow a lot of tech companies, and universities.

a lot of code in linux is made by US gov

Wrong link threatpost.com/dragos-ruiu-on-the-badbios-saga/102823/

Yup this field breeds paranoia because you realise there's no way to be completely secure. If you piss off the state enough they WILL find you.

The thing is they don't care enough, nor do they have the resources to crack down on some mongolian knitters sharing chinese cartoons. That's the only thing that really keeps you safe.

ME disabled and its firmware absent, no updates to 2006 intel microcode, FOSS linux, FOSS BIOS, only using FOSS software, encryption of entire disk no exceptions + USB storage only to eliminate DMA no exceptions + SSD with quick access to ATA secure erase (yes this SSD wipes all flash chips, no shortcuts), ath9k atheros WLAN over USB to eliminate DMA,

the only nonfree code in my system is my sound controller firmware (2006), the SSD firmware (which has no DMA) (2011), the original intel cpu microcode (2006), and firmware for controller that turns my caps lock and battery charging lights on and off (2006 or 2007), and wireless card firmware (atheros), and wired NIC firmware (never has network connection).

I may not be guaranteed absolutely secure, but sure as hell i'm a lot more than you faggots

No
Really not my man
Because of how a FPGA fundamentally works you can put a lot more static gates on a chip than switchable ones and that will never change

>acoustin
Why bother? You could do better with radiowaves wising parts of motherboard as antenna.

>MFW still using a Core 2 Duo.

>nor do they have the resources to crack down on some mongolian knitters sharing chinese cartoons.
soon they will. with cheap droids that they will flood every city with.

Almost all tech giants are working on all aspects of that.

Boston Dynamics, that was working for DARPA to make bipedal machines, was bought by google, along with a TON of other comparable companies and others that are working on AI.

>falling for the digital jew

That is clever. It's really a case though of everyone just missing a transmitter/receiver pair in the standard airgapping protocol. It doesn't invalidate it on principle. You can argue that there will "always be another" but you have to rely on more and more sophisticated RF spying equipment etc.

top kek mate, my drone can capture your flying rat

That's true, but if privacy and security are your main concerns then you can sacrifice some performance to that end. Also, think about how much x86 arch wastes space compared to something like ARM with all of the bullshit instructions that must be supported. I'm willing to bet that you can easily match performance on an FPGA-instantiated CPU to almost any real RISC processor which, honestly, is pretty impressive.

Pretty much. NSA/military techniques will always be ahead of us as we're hobbled from the start.

Yeah, and they're already storing data en masse faster than they can filter it to facilitate this future.

Again, this field makes you so paranoid it's ridiculous. It's so incredibly fucked.

so it's time to buy chinese processors?

Hahahahahaha

Yeah, sure.

I'm willing to take that bet because no
It's really not
Also the x86 instruction set is still more useful for desktop computing than ARM8 is

>tfw have worked with mediatek processors
Those are just blatantly malware
Also utterly shit

You'd lose that bet, people use FPGA soft cores all the time and they are not good. Vendors are going the other way and integrating hard ARM cores into FPGAs.

>tfw my pc has a i7-6700k that i just bought a week ago
am i fucked lads?

>Again, this field makes you so paranoid it's ridiculous. It's so incredibly fucked.
yup.
>faster than they can filter it
easily solved by AI.

might as well lube up

I wonder if building your rig inside a faraday cage would be of any help?

You've been fucked for years.

Just live your life, big brother loves you.

>wasted money on a 6700k
Trust me, the government doesn't care about idiots like you.

>microdrone flies into your room and connects to your pc
How fucked are you then

If you like Chinese government spying on you.

That micro drone might as well connect itself inside my anus so at least I'd feel some pleasure of the procedure

Rather if you like literally anyone spying on you
Chinese are garbage at making secure backdoors

>wasted money
poorfag detected

How would that work?

Data must flow into the CPU somehow in order to trigger the execution through a hardware-based backdoor. This is no different than running any other kind of malware.

kek, faraday would help (at least until they use quantum entanglement??) but youd have no internet anyway

inb4 they add a espionage layer on top of AC

>thinking I meant spend less
He bought an inferior chip.

Have there been any FPGA soft core experiments specifically using GOOD processor designs rather than say the dogshit NIOS processor?

confirmed
Kek has spoken.

>tinfoil conspiracy believers are actually right on tinfoil

>le quantum entanglement meme
Nice

> It's like a segmented, hidden part of the processor solely dedicated towards "updates"
That's nothing new, at all.
Still you have to explain me how this "segmented, hidden part" of my processor gets to execute shit. If they don't have a secret opcode built in they can't do shit and rely on the software to enable a specific processor mode or load a special address.
These things would be found immediately since it would break existing code that's in accordance with the "official" CPU spec.

The only way would be for the processor to trigger a secret interrupt to execute some specific microcode from time to time. And then what would it do? You'd need a whole operating system inside your processor with paging and filesystem drivers and everything. And then you still haven't established something worthwhile.

The only thing a CPU manufacturer can fuck you over is by skewing the built-in RNG when used by cryptography.

This too.

The only difference is that it would be invisible and not removable via software. But I think it's true that there is no demonstrated backdoor in Intel ME.

Processor vendors use very large FPGAs for sim/validation and the clock rate is dogshit slow. They would really like it to go faster.

>All this security so that I can browse a cartoon board.

top kek. watch this episode of "Black Mirror" (don't worry, every episode is an entirely different story and cast, you don't need to have seen any other episode)

thepiratebay.org/torrent/16094008/Black.Mirror.S03E06.720p.WEBRip.X264-DEFLATE[ettv]
magnet:?xt=urn:btih:5506aabe1255785b19c4329f8237486d06e7431b&dn=Black.Mirror.S03E06.720p.WEBRip.X264-DEFLATE%5Bettv%5D&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969&tr=udp%3A%2F%2Fzer0day.ch%3A1337&tr=udp%3A%2F%2Fopen.demonii.com%3A1337&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969&tr=udp%3A%2F%2Fexodus.desync.com%3A6969

>tfw they already do
I got shitty Meizu smartphone.

AMD got around this by having an ARM coprocessor that starts first and keeps "managing" it's host
Some guy found a way to listen in on their connection and AMD shut him down

top kek mate, even my old ass thinkpad has chips that function outside and above the OS (for (((security)))

If you've been reading this thread without thinking the words industrial espionage, just stick to the cartoons.

>falling for the crypto-digital jew

>Some guy found a way to listen in on their connection and AMD shut him down
Link? Sounds interesting.

>still prescient today

ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf

but yeah, is bummer - hard to motivate to do any work of value with spooks looking over your shoulder

I'm on mobile but I know that it was on the CCC convention of 2 years ago
31C3

>Intel management engine
Can be neutralized by a mod, assuming you have an SPI flasher:

hardenedlinux.org/firmware/2016/11/17/neutralize_ME_firmware_on_sandybridge_and_ivybridge.html

that's already outdated and they use better means now

The point is that nothing is impossible to overcome when it comes to computers.

>sound controller firmware

You dun goofed, now we'll backtrack your IP and watch you fap to anime in the dark.

>they don't have a secret opcode built in
But they do.

>You'd need a whole operating system inside your processor with paging and filesystem drivers and everything.
Why not?
blog.kaspersky.com/equation-hdd-malware/7623/
It doesn't need to do complex tasks mostly providing backdoors for downloading and installing worms. Also masking these worms from detection.

no but it gets more complex and then eventually you need industry specialist tools to do anything

And at that point, they can just regulate the companies who have the tools like any other industry.

You can't "update" a CPU.

>you can't update a CPU
Oh leaf
You naive fucker
You can limit or activate hidden instructions
Sure you can't just change the CPU physically

How far back did they start doing this? I would be willing to build a completely new computer with 2007 parts for example just for doing Internet related things and then use my bot net 9000 desktop for gaming and work

the company name is literally INTEL

cant even make that shit up

Of course there are processors with hypervisors.

But you have to still find a way to exploit that. What is the hypervisor going to do? Sending random parts of your memory packaged as IP packages to the Network device? And when should it do this? All the time with all processors?
You need to work harder than that. And at the point where you install software implementations to secretly trigger the hypervisor you could have stolen the data you seek anyways.
You have to convince me that malicious processor design creates risk that haven't been there before.

What groups of people does the government actively spy on anyways? As in perceive them to actually be a threat and not just a permavirgin on an anime imageboards?

Is it just TOR users and hackers?

Sound analyzer?

>2007
nah, you'd have to go WAY back

convince me a government that lets the secretary of states private emails be published in the thousands online has the bureaucratic and technological know how and man hours to employ a vast dragnet of every CPU

What algorithm is going through all that data, there is too much going on for anything to matter.

>What groups of people does the government actively spy on anyways?
they collect mass data. but right now, they don't do much with the data from the masses, only select groups.

Until the AI is built, then they can watch everyone and filter and search through all data, all the time.

or you update it with small components that you produce yourself.

if you know how to build something, you would also know how to change it.

see they have been collecting all data, but have not yet been able to use it all. this will happen as soon as the AI is built, and every tech giant is working on AI right now

>falling for the silicone jew

>tfw working at a influential company in the semiconductor industry
You guys don't want to know

>What groups of people does the government actively spy on
Pretty much everyone desu. All your emails and preety much anything you've ever posted online is available to them

Google sold off boston dynamics.

after they got all the useful tech out of them

TEMPLE OS IS THE KEY

If you black box your network, you can be on an old unpatched 2000 box and it wouldn't matter. Our intel agencies run under this premise.