News for hackers. Stuff that matters.

A comment on The Intel ME subsystem can take over your machine, can't be audited. Parent comment

Re:The Intel ME subsystem can take over your machine, can't ... by qb45 on Thursday June 16, 2016 @09:33AM (#11915934)
This cruft doesn't need three letter agencies to exist. Big customers pay for it so it's done. Once it's done, it's easier to leave it there and soft-disable for people who haven't paid for it than to actually build two versions of the chip, with and without this feature.

However, speaking of spooks, I heard rumors that either Intel AMT or BIOS or some drivers (don't remember which exactly) is sold to the Chinese market with castrated crypto. Reportedly it's because the Chinese government requires imported crypto to be just strong enough to resist average guy, but not their supercomputers.

[ Parent | on HN ]
Re:The Intel ME subsystem can take over your machine, can't ... by snsr on Thursday June 16, 2016 @03:46PM (#11918382)
Any links re: Chinese requirements or hardware with nerfed crypto?
[ Parent | on HN ]
Re:The Intel ME subsystem can take over your machine, can't ... by qb45 on Thursday June 16, 2016 @05:37PM (#11919072)
Sorry, I only heard it from someone who heard it from someone who heard it from someone who worked on it.

Some googling yielded this, for example:

http://www.networkworld.com/article/2331257/lan-wan/encrypti... (2004)

http://www.freshfields.com/en/global/Digital/China_rules_on_...

But this only shows that there are some regulations and licensing required, no details unfortunately.

[ Parent | on HN ]
Re:The Intel ME subsystem can take over your machine, can't ... by seanp2k2 on Thursday June 16, 2016 @04:12PM (#11918545)
It'd be interesting to start buying these un-un-cripple-able CPUs for use domestically, for increased security and maximum irony.
[ Parent | on HN ]
Re:The Intel ME subsystem can take over your machine, can't ... by qb45 on Thursday June 16, 2016 @05:52PM (#11919155)
Potentially exploitable or backdoored firmware with weak crypto is no better than potentially exploitable or backdoored firmware with strong crypto, unless you are expert enough to know how to exploit it and then fix. And you probably aren't, considering that this stuff is all secret.

And, first of all, I'm not even sure if it was the ME firmware or any firmware at all. Might have been some stupid application you install on Windows.

I wouldn't buy security-critical stuff in China. You can bitch all day long about the US, but the fact is, if something like this San Bernadino phone unlock case happened in China, with Chinese phone from Chinese vendor under Chinese jurisdiction, you probably wouldn't even have heard about it.

[ Parent | on HN ]