Intel ME

He might have been right

>semiaccurate.com/2017/05/01/remote-security-exploit-2008-intel-platforms/

>The short version is that every Intel platform with AMT, ISM, and SBT from Nehalem in 2008 to Kaby Lake in 2017 has a remotely exploitable security hole in the ME (Management Engine) not CPU firmware. If this isn’t scary enough news, even if your machine doesn’t have SMT, ISM, or SBT provisioned, it is still vulnerable, just not over the network. For the moment. From what SemiAccurate gathers, there is literally no Intel box made in the last 9+ years that isn’t at risk. This is somewhere between nightmarish and apocalyptic.

>The problem is quite simple, the ME controls the network ports and has DMA access to the system. It can arbitrarily read and write to any memory or storage on the system, can bypass disk encryption once it is unlocked (and possibly if it has not, SemiAccurate hasn’t been able to 100% verify this capability yet), read and write to the screen, and do all of this completely unlogged. Due to the network access abilities, it can also send whatever it finds out to wherever it wants, encrypted or not.

Other urls found in this thread:

theregister.co.uk/2017/05/01/intel_amt_me_vulnerability/
timesofisrael.com/how-intel-came-to-be-israels-best-tech-friend/
libreboot.org/faq.html#amd
hackaday.com/2016/01/22/the-trouble-with-intels-management-engine/
twitter.com/NSFWRedditGif

Of course he was right.

welp, brb getting an AMD cpu and nuking my pc

looks right after wikileaks

Is AMD compromised?

I hope not.

the image said anyone with i3 i5 and i7, but the official word so far is that "This vulnerability does not exist on Intel-based consumer PCs." is that just to not cause a panic?

t. i5 3760k

>there is literally no Intel box made in the last 9+ years that isn’t at risk.

this is important information to remember, but if they've got this system set up, that means any cell phone or land line is also continuously recording, regardless of whether the receiver has been picked up

the phone equivalent has probably been around since the 60s or 70s

>tfw those paranoid autists using pre-2000 PCs were right

Just gearing up for the hate speech laws my colleagues are working on.

theregister.co.uk/2017/05/01/intel_amt_me_vulnerability/
he was right

Of course they are

It doesn't surprised me to be honest.

What's that laptop/ThinkPad that is the ducks nuts for privacy? They're rare as hen's teeth

And people made fun of me for going AMD

so what happens when foreign intelligence or bad guys find out how to access the backdoor? north korean hackers shut down every government computer thats not intelligence related?

You mean you people didn't know about that already?

No. It's like how bing doesn't get DCMA take down notices, people forget it's there.

Oy vey!

timesofisrael.com/how-intel-came-to-be-israels-best-tech-friend/

Yes, search for AMD PSP and you'll find it's pretty much the same as the Intel.

Pretty much every x86-64 and ARM processors are getting this kind of shit.

Is there any effective defense against this?
Hardware firewalls?

>2008 to Kaby Lake in 2017
Whew, I'm safe!

Firewall on the router. Problem is how do you identify a malicious connection?

AMD has said in a recent AMA that they're evaluating the possibility of releasing the source code of the PSP.

Hopefully that wasn't just a PR move and they will actually release it.
According to the same guy from AMD it has received a CEO level attention.

Im riding a e6600 and wanted to switch to an i3 2100.


I have 60gb loli doujinshu. Dangerous?

i'm not tech savvy so what does this all mean?

should the average NEET be concerned or is this more critical for things like governments and corporations?

Basically Intel and amd have proprietary stuff on all modern cpus that gives them unremovable backdoor access at ring0. You can't even physically remove the section where this is located or try to modify otherwise windows restarts every 5 or 10 minutes

okay but why should I care.
how does this affect me

At least i still have a fully functional ancient athlon xp 2400+ system somewhere in the basement.

>gives them unremovable backdoor access
>why should I care

yeah so what? I can only see this affecting important people, organizations and entities

why would they care about an autistic anime watching nEET

That's bad. Really really bad.
A vulnerability in such a powerful thing that wasn't patched for 9+ years.
You can be absolutely certain that not only white hat hackers found it.

You're right, no one cares about you.

>why should I care
Jesus fucking Christ. This single sentence describes most millennial out there.

It's not like the vault 7 leaks revealed the CIA has lost control of it's whole cyber arsenal

I understand why it's bad

Im just asking why should the average person care? It's out of our hands

It is not all bad guys, we will all find out that each of us are sick fuckers who are guilty of hate speech. They may not want to reveal this all at once or else it will embolden us.

why should I stress over something I have no control over?

Majority of computers in use right now use a post '08 cpu.
That's millions if not billions of computers.
I'll let the professionals and leet hackers sort this one out

>currently shitposting on a decade old laptop

Small frys do not apply
big guys your time is neigh

It sucks that this is in our PCs no matter what we do, but a normal person with vanilla taste in porn and entertainment shouldn't worry. Just don't do anything sketchy

they can't jail you for being a weirdo

>being this late
That shit has been known for years.

Yes, look at the "AMD Platform Security Processor" section: libreboot.org/faq.html#amd

Because it gives full control over your computer, is undetectable and is persistent.

I posted pic related the other day on another thread, except the pic you see now is NOT the pic that posted to the board, I thought maybe I posted the wrong pic, but not only did I not have that pis that was posted on my hdd, I would have NEVER had such pro-jew propaganda at all. Tripped me out when I realize what actually happened, still not sure what totally happened, but I have never seen a "GLITCH" like that on fochin before...

That's not enough to scare that guy.

This is where the shut it down meme comes from

>tfw people will still praise government after all

Statism is a mental disorder.

So nothing is safe?

THEY CAN PLANT CP ON YOUR COMPUTER AND NEVER TRACE OR DETECT IT

You know what to do: figure out how to exploit ME and watch Intel stocks dive

daymn son

The last CPU Generation I'm confident that is not backdoored is AMD Athlon XP. That doesn't mean it doesn't have other exploits, I'm not aware of but at least I don't think the Bios is/was equiped for that.

The fuck is wrong with you cucks?

Of course it matters for you if you want to live in a free society or leave one for your or other peoples children.

By this shit exisiting in your universe, while not directly affecting you affects the society around you and those that NEED security and privacy while they risk their lives to help you and many others continue to live with the freedoms you currently take for granted.

Wake the fuck up and realize shit that doesn't affect you directly still has a grater impact on others (and you) Get rid of your "hurrdurr I'm a retarded waste of space" attitude and see the power you hold!

>NEVER TRACE OR DETECT IT
THIS...

with intels ME you are bypassing any OS and therefore any logging, if someone were to use this exploit on you, you would be thoroughly fucked.

AMD is currently considering the possibility of releasing the source code for the PSP. If it happens AMD could be trusted.

>I don't care how my own technology is used against me or the broader population, I just like cartoons. By the way I'm totally straight.
>I have nothing to hide, you can search my shit, of course you can bang my wife also

Intel ME/AMT, AMD PSP, Arm Trustzone.
>Not owning a Thinkpad t40

I'm gonna wire transfer for a x220 soon to the sjw libreboot chick.

my quad core opteron suddenly look less stupid, despite its age

>So nothing is safe?
Of course not.

No, the ME AMT system has access to system memory not storage.

These guys wont be happy

Why can't you fucking jews be non-subversive for 5 seconds. Irredeemable, the lot of you.

>not recycling the parts
>not cannibalizing it
>not selling it
>but destroying it

Of course they are

AMD is even more scammy than Intel when you look into it

Oh no the rabbi will know you shitpost with the goyim

I don't think see how this could be a big deal. Anyone who knows networking could capture the attacking traffic from the router, and use it to prove somebody is (illegally?) spying on them. Even low level IT guys have knowledge on how to do this, so it would be very easy to prove it in court.

If you're really doing illegal shit and have it on your computer you should probably use safe equipment anyway. A router with open source software, linux on your pc, and custom firewalls and everything.

Am I wrong?

Let's say it doesn't have direct access to storage(although it does)
You can still write instructions to the RAM to read/write from or to storage.

if you could trust the router hardware....if

>very easy to prove it in court
For what reason?

inb4 oyvey etc but doesnt 4chins have that occasional fuckup where it swaps the pic you post?

Sup Forumsacks post "ironic" jewish propo all the time.

>THEY CAN PLANT CP ON YOUR COMPUTER AND NEVER TRACE OR DETECT IT
This.

This

Ok how do you differentiate between legitimate encrypted traffic from illegitimate encrypted traffic.

hackaday.com/2016/01/22/the-trouble-with-intels-management-engine/

Purpose built shitbox with whitelisted services only specific to your panamanian tamagotchi hobby?

I don't think there is a good answer

Dinkum trips of truth right here.

It does, I've had it happen several times.
Somehow the images from two posts get swapped, and this happens across boards.

I think it was more of a rhetoric question. When you get an encrypted packet, the only useful information is the port (which is mostly useless) and the source IP (which can be altered via proxies).
Without seeing the actual data (which you can't as it is encrypted), there's really no proper way of determining what is malicious and what isn't.

Yes I believe it's time to light everything on fire

Stop using onboard NIC and use another plug-in NIC (read that over on el reg)

It's just a glitch, it happened to me once.

You talk shit to some virgins on Sup Forums and watch gay porn all day, nobody will spy on you

Ok so I'm a retard but using open os architecture and open router firmware couldn't you have an obscure / dynamic port specific architecture point at a vmware environment in a trusted hosting platform?

Which external NICs don't suck duck tho

If you don't worry about three letter agencies spying on you, fine.
The vulnerability was 9+ years in the wild. You really think 0 people with malicious intentions found it?

time to buy a thinkpad and install TempleOS

It doesn't matter. The ME can controls everything in your computer, including extension cards.
And it supposed to still function remotely over custom NICs to serve its official purpose.

Do you think this is the only practically built in exploit in modern computers?
There are so many at this point it's basically impossible to fully protect yourself. There is no real competitor to Intel that doesn't do this shit so it's not like a boycott would work.

Yes AMD and ARM.

Let's see. NSA and such you already know they know even the last time you took a shit. The hackers are not what you imagine, but rather some fat neckbeard who doesn't dare even look someone in the eyes, let alone confront you IRL. It doesn't really affect you in any way if some ching chong knows that yesterday you called that swede in some thread a cuck or that you listen to Eminem.

Do you really think AMD has no backdoors as well?

As I said before, this doesn't affect you at all. This is bad news since if some ching chong in loo will hack the us army for example, they can know what weapons are gonna be used and ultimately change the course of a war, but for some Sup Forums loser this doesn't matter at all.

>grants full access to everything on the computer
>undetectable
>persistent
OH I WONDER WHY IS IT SO MUCH WORSE THAN MOST VULNERABILITIES IN MODERN COMPUTERS

prove rule 34

>mfw Intel start bricking machines/damaging them and force users to buy new ones

If every I processor was exploitable, why would CIA struggle to develop windows control kits ?

What matters is someones ability to fuck your life by planting undetectable shit anywhere in any component memory even where you can't find

Imagine you get v& and they say "Well we found """your""" stash of kidpics in your trackpad ram you're fucxed" means anybody can get you v&

What do you want me to do then Scholomo?
Not use a computer younger than myself?
Unless you can provide some form of bypass that is not hermit level, then you probably have no solution to the problem.

Learn to read Dumitru, I already said that there is no real competitor to Intel that doesn't do this shit. As in any company probably has that problem.

Remember the live facebook nigger shooter? He had an iphone on him and the police couldn't track him down for hours. Those backdoors are not avalabile for even police or public institutions, only (((they))) can access them

I actually trust AMD more than intel. But I am not going to blindly believe they didn't backdoor the PSP.

Currently AMD is evaluating the possibility of releasing the source code of the PSP, if it happens I will trust them.

>why would CIA struggle to develop windows control kits

Because the CIA didn't develop shit, it stole most of the tools it has from UK programmers and developers working for the government. Wait no we sold it to them for shekels.

>Americans
>Smart
Pick one please.

>What do you want me to do then Scholomo?
Build your own host-based firewall.