News for hackers. Stuff that matters.
Re:“We have obtained fully functional JTAG for Intel CSME vi... by Natsu on Friday November 10, 2017 @11:35AM (#15671011)
We should start demanding physical shutters for laptop webcams. Does anyone make those yet?
Re:“We have obtained fully functional JTAG for Intel CSME vi... by confounded on Friday November 10, 2017 @12:12PM (#15671292)
Even better is a hardware kill switch, especially for the mic.
Re:“We have obtained fully functional JTAG for Intel CSME vi... by em3rgent0rdr on Friday November 10, 2017 @04:20PM (#15673143)
Librem Purism labtop has hadware kill switches.
Re:“We have obtained fully functional JTAG for Intel CSME vi... by dmix on Friday November 10, 2017 @12:35PM (#15671452)
I managed to unplug the mic in my Thinkpad and my Dell XPS laptop with about 5min of work for each. It's still possible to do at the moment if you don't mind relying on plugging in headphones w/ a mic to use one.

Of course a switch would be nice, similar to the older Thinkpads which had a hardware switch for the network devices on the front, originally for use on airplanes.

Re:“We have obtained fully functional JTAG for Intel CSME vi... by ethagnawl on Friday November 10, 2017 @01:18PM (#15671773)
> I managed to unplug the mic in my Thinkpad

Any chance you documented the procedure or have links to relevant documentation?

Re:“We have obtained fully functional JTAG for Intel CSME vi... by detaro on Friday November 10, 2017 @05:53PM (#15673771)
For Thinkpads the documentation you're looking for is the "Hardware Maintenance Manual" (HMM). E.g. here is one for the X260, it clearly describes where the camera/microphone assembly is, how to get to it and where its wire connections go: https://ok2.de/ThinkPad/HMM/x260_hmm_en_sp40j72016.pdf I haven't taken apart one of the more Ultrabook-style ones, so not sure how accessible those are, but the traditional ones are very serviceable.

I wouldn't be surprised if the better Dell models have similar documentation available.

Re:“We have obtained fully functional JTAG for Intel CSME vi... by mschuster91 on Friday November 10, 2017 @02:20PM (#15672212)
This is easy in almost all laptops: the microphone is attached to the mobo via a 2-wire tiny plug. Disassemble your laptop, look at the other side of the keyboard pane, a bit away from the speakers. Some laptops might also carry mikes in the screen bezel or multiple mikes, so check all cables that go away from the mobo.
Re:“We have obtained fully functional JTAG for Intel CSME vi... by jmnicolas on Friday November 10, 2017 @01:33PM (#15671872)
But now you have to trust the switch to really deactivate the mic. I'm a recursive paranoiac !
Re:“We have obtained fully functional JTAG for Intel CSME vi... by cjbprime on Friday November 10, 2017 @11:15PM (#15674964)
The usual* way to handle this is to have a small LED next to the mic/camera that shows when it's on -- and have it wired up to the device in series, such that it's software-impossible for the device to be powered without the light being on.

*: it's what we did on the One Laptop Per Child laptop, and I'm sure others have too.

Re:“We have obtained fully functional JTAG for Intel CSME vi... by tmzt on Sunday November 12, 2017 @12:27PM (#15681597)
Thank you for inventing the netbook and showing the ODMs how to make low cost PC notebooks.

Any idea where to get a CLI-from-boot notebook for teaching kids programming and encouraging a hacker ethic?

Re:“We have obtained fully functional JTAG for Intel CSME vi... by cjbprime on Monday November 13, 2017 @01:56PM (#15689025)
Thanks for the kind words! I haven't used it personally, but a programmer in my Twitter feed recommended this one that they've been using with their kids recently. (I don't think there's a heavy emphasis on CLI.)

https://tksstgiftguide.tumblr.com/post/167274832422/our-kids...

Re:“We have obtained fully functional JTAG for Intel CSME vi... by detaro on Friday November 10, 2017 @05:48PM (#15673733)
At least you only need to verify a switch once, it won't be compromised by software changes.
Re:“We have obtained fully functional JTAG for Intel CSME vi... by squarefoot on Friday November 10, 2017 @07:46PM (#15674321)
Assuming the switch does really cut the mic signal and doesn't instead act on a i/o pin which calls a function to disable the mic input. The second solution would be hackable.
Re:“We have obtained fully functional JTAG for Intel CSME vi... by Natsu on Friday November 10, 2017 @03:21PM (#15672630)
That's a very good point. We have it for wifi already, so...
Re:“We have obtained fully functional JTAG for Intel CSME vi... by jstanley on Friday November 10, 2017 @04:32PM (#15673239)
I 3d-printed a crude shutter and super-glued it to the bezel: https://youtube.com/watch?v=oOkPP_5bjhs

I think it would be about as easy to make a cardboard one.

Re:“We have obtained fully functional JTAG for Intel CSME vi... by wrekone on Sunday November 19, 2017 @12:19PM (#15734753)
Indeed they do. The security team at my work ordered hundreds of them and hand them out to anyone that asks. They even have the company logo on them.
Re:“We have obtained fully functional JTAG for Intel CSME vi... by bobsoap on Saturday November 11, 2017 @09:26AM (#15676478)
There's been a Kickstarter called Nope for cams for a few years now, they exceeded funding by a large multiple each time. I got the second version a year ago, they are now on version 3 and added a headphone jack blocker.

https://www.kickstarter.com/projects/bungajungle/nope-sound-...

Re:“We have obtained fully functional JTAG for Intel CSME vi... by anoother on Sunday November 12, 2017 @07:16AM (#15680606)
Not really sure about the headphone jack blocker; I'm not aware of an OS where the sound source can't be trivially switched in software, even when headphones are plugged in.

The likelihood is that if an attacker has the ability to record audio, they also have the ability to bypass this device.

Re:“We have obtained fully functional JTAG for Intel CSME vi... by rileyphone on Friday November 10, 2017 @05:11PM (#15673488)
My Asus EEEPC has one.
Re:“We have obtained fully functional JTAG for Intel CSME vi... by hoopyfrood on Friday November 10, 2017 @11:51AM (#15671119)
C-slide dot com, the iPad one (round with a pivot) is my favourite
Re:“We have obtained fully functional JTAG for Intel CSME vi... by stuaxo on Friday November 10, 2017 @05:46PM (#15673716)
Indeed, bags of lens stick on lens covers (that allow you to open when you need the camera) is a product idea I thought of ages ago, but too lazy to actually do.
Re:“We have obtained fully functional JTAG for Intel CSME vi... by blt on Friday November 10, 2017 @07:31PM (#15674261)
it exists already, got one as swag at a conference from Nvidia (???). strange gift, I like the sentiment though.
Re:“We have obtained fully functional JTAG for Intel CSME vi... by smsm42 on Friday November 10, 2017 @08:20PM (#15674447)
Yes, got mine as a swag too (not Nvidia), works perfectly. Can be found by looking for "webcam cover slider" on Amazon or I assume any web store that deals with such things.