You are viewing a single comment's thread.

view the rest of the comments →

carlip ago

who cares? a processor has no storage capabilities so none of this data can be tracked if you're using a live boot OS. Turn on wireshark and look for packets leaving to intel, you wont find any.

Cincosiber ago

a processor has no storage capabilities so none of this data can be tracked ME has access to disks and network cards below the whatever OS you use, it's the ultimate backdoor

carlip ago

Great good job on ignoring the rest of what I said.

Cincosiber ago

i did read what you said an how people had replied, wasn't clear originally if you were trying to down play the ME threat.

send all your traffic from the suspect computer to the linux machine

I thought ME would also bypass Linux? better use a non Intel based machine or somthing without ME on board, does that exist?

carlip ago

yes it would, but that's not the point. What im saying is that a processor alone does not have the storage capabilities to track everything you do on your PC. In order for that data to be useful it would need a place to save it, memory would be a bad choice since its volatile. So the CPU would need to save it to a HD or send it to a server right away.

That's why I said to use a live boot OS, then if "EVERYTHING" is saved as the video claims the CPU has no option but to send it to a server. That's where another machine comes in. The original, live booted computer (PCA) will need to send the data using standardized Ethernet frames because that is what the internet is built on. Those frame would be sent to the second computer (PCB) where they could be stored or read before being encapsulated and sent as a TCP segment to the internet.

Yes PCB would be doing the same and you would have no way to catch that, but catching it from PCA would let you know enough about the intel ME PDU to block those ports and or IPs. And thats IF they even exist.

Synxsynxsynx ago

It has eeprom

carlip ago

Unrealistic. That would require that it's on die or using an external chip that would be noticable to the naked eye on every motherboard. Those types of ROM are not big enough to store much data. Unless you're saying every single motherboard manufacturer is in on these scheme, even competition to Intel.

trotskyberg ago

Yes these low-level backdoors seem more for physical compromise. I don't see any evidence these low-level backdoors can be used from over the internet (at least without some extra software being installed). So doesn't that mean we're protected on Linux, especially if Intel's and AMD's "management" features are disabled?