Intel x86s hide another CPU that can take over your machine (you can't audit it)

Zicos ^ | Wednesday June 15, 2016. 02:48 PM | from BoingBoing

[Utilizer]

The Intel Management Engine (ME) is a subsystem composed of a special 32-bit ARC microprocessor that's physically located inside the chipset. It is an extra general purpose computer running a firmware blob that is sold as a management system for big enterprise deployments.

When you purchase your system with a mainboard and Intel x86 CPU, you are also buying this hardware add-on: an extra computer that controls the main CPU. This extra computer runs completely out-of-band with the main x86 CPU meaning that it can function totally independently even when your main CPU is in a low power state like S3 (suspend).

On some chipsets, the firmware running on the ME implements a system called Intel's Active Management Technology (AMT). This is entirely transparent to the operating system, which means that this extra computer can do its job regardless of which operating system is installed and running on the main CPU.

[Utilizer]

More security concerns, this time from the hardware angle...

[Secret Agent Man]

Starting from what generation x86 processor?

[Utilizer]

The article states: “Recent Intel x86 processors”

and:

“On systems newer than the Core2 series...”

So I would guess Core2 and later.

[miliantnutcase]

vpro enabled CPU’s

[Red Badger]

Tech ping!.......

[GraceG]

Is AMD any better?

[Utilizer]

Ummm... have you tried actually reading the article?

Just a suggestion...

[minnesota_bound]

NSA back door and other foreign intel agencies and of course hackers.
“Once a system is compromised by a rootkit, attackers can gain administration access and undetectably attack the computer.”

[arl295]

This has been around for ages. Like core 2 duo and is featured on business class/enterprise class hardware. Is not commonly found on home/low end machines you buy at best buy or any box store.

This technology is also found in Servers as well, HP has iLo, integrated lights out and allows remote administration of machines, just like you were sitting at the machine. And Dell has iDrac, similar to HP’s iLo. These systems are computers that reside on the motherboard, have their own firmware and operating systems and you can use them even with the machine “powered off” you can even remotely reload the operating or secure erase the hard drive arrays.

Powerful stuff but nothing new and generally doesn’t affect home users.

[arl295]

People give hackers too much credit

[Maudeen]

I got a headache just reading a few sentences. So for the technologically challenged what does all this mean and what should we do? Get out the old typewriter? Can anyone provide a reader’s digest version to the article or should I just count myself as stupid.

[RebelTex]

Shout out to dayglored for a possible Windows pinglist alert.

MS and Intel have always been in bed together and now creating new ways to spy on you & control you.

The machine is alive.

Welcome to SkyNet.

[minnesota_bound]

I saw you writing that as you typed it..... : )
Now put on some pants!

[Talisker]

Great. Just great.

[dayglored]

> Shout out to dayglored for a possible Windows pinglist alert.

Now, what the hell is this? A stealth CPU-in-a-CPU? ... PING!

You can find all the Windows Ping list threads with FR search: just search on keyword "windowspinglist".

Thanks to RebelTex for the ping!!

[GraceG]

I read it and they didnt mention AMD, i was just wondering if anyone here heard if AMD HAS something simular...

[RebelTex]

I would be surprised if AMD has anything so devious and stupid.

AMD has always prided itself on speed, performance, and overclocking ability - especially for gamers and modders.

I prefer AMD CPUs/GPUs, and most other things they can come up with (hey, root for the underdog, heheh).

I’ve bought 2 laptops, 3 desktops, and built 1 desktop all based on AMD.

[Utilizer]

Thank you for the updated info. I had never heard of this before and so your input is much appreciate. :)

I would gather I am not the only one who had no idea that the basic hardware some of us had come to rely upon had such Siliconware Ghostcontrollers so prevalent on chips we had come to rely upon...

Not “welcome” news, by any stretch of the imagination...

[Utilizer]

It means that the CPU you may be relying upon depending upon its manufacturing origin might have a hidden CPU installed at the fabrication point which could potentially expose the end-user to various hacks that no manner of x86 commands can ever rescue you from since it is an entirely different manner of device installed alongside your standard hardware.

Think as if someone had installed a “maccomputer IC” at the factory within your x86 CPU (Appleusers, I know -I am simply illustrating a point not making any manner of claim, so right then?) that ran mac-commands if instructed to without your approval or in some cases without your knowledge, and you may begin to understand why some of us find this so worrisome...

[Utilizer]

‘Ay! How about a ShoutOut (not the beerguzzlin’ sort now...) for yer mate who originated this thread to begin with??? *grin*

It took no small amount of work to dig this one up! And a total surprise it was, it was! Sure and it wasn’t guaranteed to make many people happy, I can guarantee you that me boyo. Humph!