Talks to Watch

Intel ME explained (intel management engine) from insider

12K views · Oct 7, 2018 · 6:36 · 0 HN recommenders · 3 mentions · discussed 2023

A short video explaining the Intel Management Engine, a hidden embedded computer inside Intel machines with deep access to hardware. It is presented from an insider's perspective and raises backdoor and NSA concerns.

Why Hacker News points people here: HN cites it as a quick introduction to why Intel ME is a trust problem for anyone worried about hardware-level access.

“This embedded computer system has access to all your memory devices.”HN comment, 2023

What Hacker News said 3

Cites itEternalCarnageJul 2023

“This embedded computer system has access to all your memory devices.”

Explains the hidden embedded computer inside Intel machines.

Full comment

The problem of having a "secret" computer (with an operating system) within your computer. this video This embedded computer system has access to all your memory devices. Disabling it? Not convenient.

in “Ask HN: Problems for the Next Decade” · view on HN
Cites itd-161Sep 2023

Insider on remote management hardware behind Intel ME.

Full comment

The Intel Management Engine always runs as long as the motherboard is receiving power, even when the computer is turned off. This issue can be mitigated with deployment of a hardware device, which is able to disconnect mains power. Intel's main competitor AMD has incorporated the equivalent AMD Secure Technology (formally called Platform Security Processor) in virtually all of its post-2013 CPUs. link Ylian Saint-Hilaire, principal Engineer working on remote management software including hardware manageability: this video link

in “Snowden leak: Cavium networking hardware may contain NSA backdoor” · view on HN
Cites itLabMechanicNov 2023

“Don't trust computers, see: Intel ME explained (intel management engine) from insider”

Cited as reason not to trust computers.

Full comment

I use KeePassXC to manage passwords. Save the encrypted file (Password.kdbx, 3 kB) wherever you want. Extra points: For emails, buy a domain like mydomain.com for about $15 a year. This lets you have a stable email address (e.g., [email protected]) no matter which email service you use. Consider link or something similar. I also use Portmaster when I am on Windows. Forget defending against the government, they have state authority (violence, jail time), you don't. See: link One-time pad (OTP) or "true randomness" (uniform probability distribution) is your only safe option (as long as they cannot time travel), but do it offline. Don't trust computers, see: Intel ME explained (intel management engine) from insider this video Physics is your only safe haven. Seemingly, everything/everybody has to abide by the law of physics. Even your "almighty" state.

in “Tell HN: Your account can be deleted anytime, for any reason” · view on HN