Intel ME explained (intel management engine) from insider
jessieCited 3× on HN, 2023–2023
explainer · intermediate · 2023–2023 on HN
A short video explaining the Intel Management Engine, a hidden embedded computer inside Intel machines with deep access to hardware. It is presented from an insider's perspective and raises backdoor and NSA concerns.
HN cites it as a quick introduction to why Intel ME is a trust problem for anyone worried about hardware-level access.
Up next
11 mo on HNBehind the Scenes of iOS Security
Black Hat
9 HN recommender · 2016–2026
11 mo on HNWhy Electronic Voting Is Still A Bad Idea
Tom Scott
11 HN recommender · 2020–2026
10 mo on HNUSENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
10 HN recommender · 2018–2026
10 mo on HNDefcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
6 HN recommender · 2012–2019
9 mo on HN28c3: The Science of Insecurity
28c3
9 HN recommender · 2012–2024
8 mo on HNDEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome
DEFCONConference
11 HN recommender · 2017–2023
7 mo on HNElevator Hacking: From the Pit to the Penthouse
DeviantOllam
9 HN recommender · 2014–2026
7 mo on HNCompiling C to printable x86, to make an executable research paper
suckerpinch
8 HN recommender · 2018–2023
7 mo on HNBreak Me00 The MoVfuscator Turning mov into a soul crushing RE nightmare Christopher Domas
Adrian Crenshaw
6 HN recommender · 2017–2026
7 mo on HNBlackHat USA 2011: SSL And The Future Of Authenticity
Christiaan008
9 HN recommender · 2011–2017
7 mo on HN27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)
basti0007
8 HN recommender · 2011–2024
7 mo on HNFrank Abagnale | Catch Me If You Can | Talks at Google
Talks at Google
8 HN recommender · 2018–2023
3 comments from Hacker News
I use KeePassXC to manage passwords. Save the encrypted file (Password.kdbx, 3 kB) wherever you want. Extra points: For emails, buy a domain like mydomain.com for about $15 a year. This lets you have a stable email address (e.g., johndoe@mydomain.com) no matter which email service you use. Consider link or something similar. I also use Portmaster when I am on Windows. Forget defending against the government, they have state authority (violence, jail time), you don't. See: link One-time pad (OTP) or "true randomness" (uniform probability distribution) is your only safe option (as long as they cannot time travel), but do it offline. Don't trust computers, see: Intel ME explained (intel management engine) from insider ▶ this video Physics is your only safe haven. Seemingly, everything/everybody has to abide by the law of physics. Even your "almighty" state.
The Intel Management Engine always runs as long as the motherboard is receiving power, even when the computer is turned off. This issue can be mitigated with deployment of a hardware device, which is able to disconnect mains power. Intel's main competitor AMD has incorporated the equivalent AMD Secure Technology (formally called Platform Security Processor) in virtually all of its post-2013 CPUs. link Ylian Saint-Hilaire, principal Engineer working on remote management software including hardware manageability: ▶ this video link
The problem of having a "secret" computer (with an operating system) within your computer. ▶ this video This embedded computer system has access to all your memory devices. Disabling it? Not convenient.