Spyware at The Hardware Level - Intel ME & AMD PSP

In this video I discuss the Intel Management Engine and AMD's Platform Security Processor, both of which are hardware level spyware embedded into their respective CPU's that have full control over the primary CPU that the user does their computing on. The control these management engines have over the primary CPU include

Ability to read and manipulate the contents of ram
Ability to read and manipulate data stored on your hard drive
a separate dedicated network connection that cannot be blocked with firewall rules
Ability to read and manipulate keystrokes and mouse movements
Ability to read and manipulate images on screen

and be sure to click that notification bell so you know when new videos are released. ₿💰💵💲Help Support the Channel by Donating Crypto💲💵💰₿

Bitcoin
3MMKHXPQrGHEsmdHaAGD59FWhKFGeUsAxV

Ethereum
0xeA4DA3F9BAb091Eb86921CA6E41712438f4E5079

Litecoin
MBfrxLJMuw26hbVi2MjCVDFkkExz8rYvUF

Dash
Xh9PXPEy5RoLJgFDGYCDjrbXdjshMaYerz

Zcash
t1aWtU5SBpxuUWBSwDKy4gTkT2T1ZwtFvrr

Chainlink
0x0f7f21D267d2C9dbae17fd8c20012eFEA3678F14

Bitcoin Cash
qz2st00dtu9e79zrq5wshsgaxsjw299n7c69th8ryp

Etherum Classic
0xeA641e59913960f578ad39A6B4d02051A5556BfC

USD Coin
0x0B045f743A693b225630862a3464B52fefE79FdB

[..]

"Intel Inside" wasn't about the company, it was about the intelligence agencies.

[zzzTyle]

Pretty sure TempleOS automatically patches this with divine microcoding.

[oneheckofabanana]

Intel's security model is actually much more advanced than Security by Obscurity. Their actual security model is called "Trust Me, Bro" and it works like this:
User: Intel, how can I know your system is secure?
Intel: Trust me, bro!
User: Can I see the source, so I can check for myself or let someone I trust check for me?
Intel: Nah, bro, just trust us!

[alchemist]

I solve the security problem by storing critical sensitive information in my brain, then forgetting it.

[bobafruti]

When you said “alphabet” I thought you meant Google not CIA, FBI, NSA... then I realized that was a distinction without a difference.

[jamoxploder]

"Bioluminescent" - Terry A Davis would be proud

[GreyBandanna]

To keep your CPUs from spying on you, you just run them over

[wallyhackenslacker]

Poor MINIX, I worry it'll go down in history as "that spy OS used by Intel" despite it's long and proud career as an educational OS.

[multitrackdriftu]

According to libreboot, anything from AMD's 15h architecture (Bulldozer) down should be fine, as they released the source code for them.

Also, I got an ad for a schizophrenia medication at the end of this video. Fancy that.

[EnderCrypt]

Protection Ring:
3: User Mode
2: Drivers
1: Drivers
0: Kernel
-1: Hypervisor (virtual machine)
-2: System Management Mode (operating system in the CPU)
-3: Intel Management Engine (remote administration in intel cpu's)

[mateusmt]

Intel Management Engine and AMD Platform Security runs at Ring -3, the most privileged ring in existence, and they are spywares indeed.

[blkspade]

I do believe one noted difference between Intel's ME and AMD's PSP, is that many of Intel's vulnerabilities were remotely exploitable where as AMD's required physical access. That is not an insignificant difference.

[sjuvanet]

rest in peace, terry. our greatest programmer.

[typingcat]

Builds a truly "libre" computer; installs Windows 10.

[xXYannuschXx]

I remember reading somewhere, that some guy managed to get an Intel processor to run with a modified BIOS that lacks the Management Engine microcode needed for it to run; the CPU was working flawlessly, except for ANY kind of IP functions not working in any OS. I think this alone tells everything you need to know about this thing.

[jirikrajnak]

We're living in a 60s sci-fi writer's worst nightmare.

[smrtfasizmu]

My grandpa worked for some part of his life in an encryption center for my country. He talked to me about stuff like this, I only vaguely remember it. I wish I was paying more attention back then.

[trueriver]

"There isn't much you can do about it"

Reminds me if that line where a recalcitrant computer is threatened with a fire axe "I'll give you a reprogramming you won't forget".

Almost anyone can disable IME.

The clever thing is to disable it without disabling the rest of the CPU

[ronvoy]

The most secured computer is a pocket calculator

[androkon]

The solution is clearly to design my own motherboard, so I can be sure there aren't more hidden mics than usual