Uncorrectable freedom and security issues on x86 platforms (2016)

Re:Uncorrectable freedom and security issues on x86 platform... by rocqua on Friday March 03, 2017 @05:29PM (#13787443)

> I have yet to hear any explanation of the IME that makes sense without the presence user-hostile intent.

The entirety of enterprise laptop management. Not because you don't want users to change their laptop. The point is to be able to run updates for the users.

Or consider the remote KVM option. Disregarding security, that is a sysadmin's wet dream. Being able to recover a system that can't boot saves a lot of boots on the ground.

[ Parent | on HN ]

Re:Uncorrectable freedom and security issues on x86 platform... by __jal on Friday March 03, 2017 @07:44PM (#13788354)

I get all that - I've worked in enterprise IT my entire career.

It does not explain the 30 minute timer.

[ Parent | on HN ]

Re:Uncorrectable freedom and security issues on x86 platform... by discreditable on Saturday March 04, 2017 @08:35AM (#13790825)

> It does not explain the 30 minute timer.

An innocent use would be: "If the ME is hung, turn it off and on again."

[ Parent | on HN ]

Re:Uncorrectable freedom and security issues on x86 platform... by __jal on Thursday March 09, 2017 @05:03PM (#13834194)

Sigh. If I need to spell this out:

Why is the ME watchdog mandatory?

What innocent explanation details why Intel has chosen to deny me the option to consider the ME a security risk in my environment and disable it?

[ Parent | on HN ]

Re:Uncorrectable freedom and security issues on x86 platform... by 1001101 on Friday March 03, 2017 @05:47PM (#13787604)

Even if the CPU running Windows is bluescreened, you can still pull up a KVM remotely. Demonstrates the power that AMT possesses for good or ill.

[ Parent | on HN ]