News for hackers. Stuff that matters.

A comment on Experiments with disabling the ME on Sandybridge x230.

Re:Experiments with disabling the ME on Sandybridge x230 by Animats on Tuesday September 13, 2016 @01:44PM (#12490574)
"The ME code to start the platform is in (on-chip) ROM and a failed signature check of the (compressed with AFAIK still unknown codebook) ME code in flash just means that the ME considers the system broken and allows it to run for a little while so that a human can repair it."

So 1) will the system stay up with the ME software erased, 2) what's the ROM component doing besides managing the boot, and 3) what access does it take to alter the ME's firmware?

[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by yuhong on Tuesday September 13, 2016 @01:47PM (#12490610)
The ME firmware is signed by Intel I think.
[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by yellowapple on Tuesday September 13, 2016 @08:24PM (#12493376)
So compromise their signing keys and we have a wide-open door to neutralizing (and/or replacing) ME, right?
[ Parent | on HN ]