News for hackers. Stuff that matters.

A comment on Disabling the Intel Management Engine. Parent comment

Re:Disabling the Intel Management Engine by laurentdc on Tuesday October 10, 2017 @03:58PM (#15444867)
I think they already did: https://github.com/corna/me_cleaner/wiki/Intel-Boot-Guard
[ Parent | on HN ]
Re:Disabling the Intel Management Engine by craftyguy on Tuesday October 10, 2017 @04:01PM (#15444889)
That has been around for years, and requires that the CPU + motherboard are paired during manufacturing so the CPU can be fused appropriately.
[ Parent | on HN ]
Re:Disabling the Intel Management Engine by Kwastie on Tuesday October 10, 2017 @04:35PM (#15445114)
interestingly enough some implementations are broken because of buggy UEFI (AMI) https://embedi.com/blog/bypassing-intel-boot-guard
[ Parent | on HN ]
Re:Disabling the Intel Management Engine by revelation on Tuesday October 10, 2017 @05:35PM (#15445503)
No surprise, I mean verifying the integrity of the BIOS is like PlayStation 1 level of crypto chainloading madness. A great scheme that will always fail because whatever software you are verifying will be imperfect. The chance that software produced by companies whose "day job" is putting flashing LEDs and DC-DC converter heatsinks on reference designs is zero.
[ Parent | on HN ]