Intel Did it Again! (AMT & ME SPOOKINESS)

[@Deliverygirl]

My laptop is so cool it glows in the dark, and it's not even got a backlit keyboard!

[@actionads8443]

this comment glows

[@realroforb7676]

Get a new one. A new laptop.

[@animepussy8356]

run it over

[@shreejal]

Can someone please explain this joke?

[@pardal_bs]

@@shreejal kzbin.info/www/bejne/d5OqZ6hua9lnmKM

[@loading...3197]

"bioluminescent" You have earned my utmost respect, Mr. Outlaw. Terry would be proud.

[@thefrey9588]

Literally just finished watching the Down the Rabbit Hole video on him before coming here.

[@RamkrishanYT]

@@thefrey9588 link?

[@thefrey9588]

@@RamkrishanYT kzbin.info/www/bejne/i3TKoKuHeMtogMk

[@jakemastandrea6872]

Divine intellect

[@MrEdrftgyuji]

"You hit them with you car. That's what you do."

[@kekistanifreedomfighter4197]

i'm honestly so glad my mother held onto her pentium M compaq presario 4000 laptop from 2005 long enough for me to use it for Linux for this reason. something old, rugged & actually secure i can use. no black box for the glowies.

[@liesdamnlies3372]

Both Purism and System76 sell devices with the ME absolutely nuked. Not disabled, shredded. Not coming back. Ded In this case, you can in fact have your cake and eat it too.

[@johnleuenhagen9068]

Got a Thinkpad X200 off eBay, works great for this purpose.

[@liesdamnlies3372]

@Imix Muan It's also verifiable.

[@deoxal7947]

How well does it run a DE? I have laptop significantly newer than that and it lags with XFCE Manjaro sometimes by a lot.

[@johnleuenhagen9068]

@@deoxal7947 just use dwm

[@Calajese]

"Some remote hackster wearing programming socks" this line sent my sides to orbit

[@johnleuenhagen9068]

Hax0r*

[@Ozzymand]

Pogramming socks on, buttlpug in, theme set to dark, yep its hacking time

[@UnordinaryCarl]

@@Ozzymand Take it boyy gachibass inject

[@notaboutit3565]

@@Ozzymand *fprrrt* It’s in uWu

[@Picture_Pig]

literally me, mrow! :3

[@John_Gaye]

"monitoring waifu debaits on mongolian basket weaving forums under the guise of fighting terrorism" MY SIDES

[@stuffthings7084]

they actually do the CIA/Mossad were doxxing/threatening people in the epstein threads on 4chan using the IME & ZDE shit and got doxxed themselves

[@deoxal7947]

@@stuffthings7084 @stuff things See now that's the kind of claim that requires evidence. In order to peg posts to IPs they'd first need to be in control of the 4chan server. So are you alleging they secretly siezed them?

[@Gilberto90]

@@deoxal7947 National Security Letters, dude.

[@deoxal7947]

@@Gilberto90 Put the link to them here

[@Gilberto90]

@@deoxal7947 National Security Letters are usually issued alongside a gag order so you can't tell people about the fact you've been issued one: www.newyorker.com/tech/annals-of-technology/what-its-like-to-get-a-national-security-letter

[@elclippo4182]

Intel = Intelligence Service 🤷🏻‍♂️

[@vibecheck2787]

AMD is no better

[@yahallo4423]

"getting pegged by vulnerabilties by a couple of years" you mean... every couple of weeks?

[@kyu9649]

Keep in mind that the CVE scoring is also not always accurate. Sometimes a score is lower even tho the exploitation vulnerability would result in a disaster. This is because sometimes CVE's are not verified. Verfied CVE's tend to get higher scores than non verified ones.

[@censoredterminalautism4073]

As always, we can count on the glowFRIENDS to keep us safe!

[@enedrob]

It would be cool if we could use an exploit to reprogram the management engine so that you would get extra cpu, and maybe enhanced networking.

[@thecashewtrader3328]

Lol

[@fss1704]

More like debugging stuff you dont have access

[@RobertJohnson-lb3qz]

Awesome experiment. Why let an extra cpu just sit there doin nuthin...

[@oahts5906]

If there’s a will..

[@XenonG]

Thanks Intel for the ring 0 and ring -1 access through the internets!

[@jefersonlemos4135]

If I were a good hacker interested on vulnerabilities on those new Intel chips I would not just be limited on doing ramsonware but would take the most benefit on having full root access to a computer station, as you have control over the cpu, bellow the system's capabilities. Including marketing data and computing resources

[@whtwolf100]

Use every intel processor on the planet as your own private cryptobotnet, use the profits to take over the world.

[@jackdavidson5863]

Thats why I use a thinkpad T60 as my main laptop: libreboot and pre-IME

[@thecashewtrader3328]

Based

[@hindsight9213]

"bio-luminescent 3 letter agencies" is the best way of saying the feds that i have ever heard

[@jefersonlemos4135]

I hope we can have affordable RISCV soon but at least on cloud infraestructure this architecture could have more impact, one thing that gave me some hope on it is Alibaba's investments on this architecture. So at least on the high end computing there is not that absolute dependency on Intel or AMD

[@micycle8778]

Is it not possible to track a router to prove that AMT is sending packets with bad intent?

[@thecashewtrader3328]

This

[@whtwolf100]

How does that work

[@micycle8778]

@@whtwolf100 you just sniff the packets coming out of your NIC to make sure you don't see anything you're not expecting

[@prawny12009]

Traffic does not show in programs like wire shark.

[@charlorme9155]

love the "NSA inside" badge. All governments want freedom as long as its within their T&Cs !

[@demonicavenger6987]

Some times i wonder, how is intel still not getting sued over this

[@IsoMacintosh]

For what? Adding a feature that many users demand? or the fact that it's kinda crappy? or the fact that it is "totally" used by government to spy us even if there's no evidence?

[@Metalcape]

I remember that in the comments of the previous video about Intel ME/AMD PSP some people mentioned that they should only be able to communicate with the outside through the integrated network card, because they would lack the drivers to access any PCIe cards. This seems possible, but is there any evidence?

[@vuufke4327]

intel's name is spot on

[@andreasreich3933]

This Channel is wildly underrated

[@seanbrisson7928]

3:45 listen... The name of the compagny is : INTEL : To get Intel from other country... you get it?

[@lovely-shrubbery8578]

Yay I wanted more of your perspective on this

[@Canadian789119]

Newer versions of ME actually degrade performance. Older versions when disabled you actually get a speed boost. Newer versions the Reserved CPU frequency is lost.

[@lelouche9894]

Because it's never "disabled"

[@404hopenotfound]

me has its own cpu and ram

[@Sonic-ww6wm]

how bad is amd affected by this? i know they have something similar to intel ME

[@undertheoath]

they have something called AMD PSP, he did a video on it I think

[@Sonic-ww6wm]

@@undertheoath yes i heard of it before, i'll try to find the video

[@liesdamnlies3372]

kzbin.info/www/bejne/fn_aiIRvr6yHY5o

[@zyan983]

The amd PSP is can be "disabled" and the reason I'm putting quotes is amd has still kept the PSP closed source while the rest of their firmware is open source from my knowledge, so even if I disabled it in BIOS it could still be running.

[@xijinpingpong4426]

AMD PSP is similar, but nobody knows exactly what it is doing. All we know is, that it runs on an ARM-Processor inside the AMD-CPU. I think the official statement of AMD is: "The PSP can execute system workloads as well as workloads provided by trusted third parties."

[@clarkx86]

Do AMD (e.g. Ryzen) CPUs also have something similar to Intel's ME? EDIT: After a quick research it seems that, yes, they do... :-/

[@noobie379]

Yes it is called a AMD PSP

[@ARitzCracker]

@@noobie379 Most BIOSs allow you to disable PSP, (If you want to sacrifice secure-boot) Intel platforms don't give you that choice.

[@MemeReviewer]

The benefits of AMD

[@Perseagatuna]

@@ARitzCracker how? I have an Asrock A320 board, and don't need secure boot (i use arch btw)

[@demonicavenger6987]

I still don't get the point of secure boot

[@kyu9649]

Also one more reason to not buy an Intel CPU. I just some open source CVE's using the Risc-V instruction set :(

[@xDMG15x]

It was nice of them to give their blackbox a seperate mac address so users can deny any network connections.

[@chrkrngl]

NSA fades in comparism to C_IA joggers.

[@etaspirit]

But can we run doom on that little separate cpu thingy?

[@deluxetier]

"bioluminescence 3 letter agencies" amen Terry

[@pelodofonseca6106]

Terry RIP.

[@kurokurovich]

Security, they say

[@jimoshellen]

NSA Inside 👌

[@Aemilindore]

People need to develop reliable readily available software that exploit management engine bugs. Intel will learn a lesson then m

[@snackers7]

I dont know why you want to trust intel anymore....

[@guscfer157]

the last time we (sort of) did that, the most infamous and notorious computer virus in history (wannacry) happened.

[@nathanacreman632]

@@guscfer157 we need somebody to just break into intel and steal their source code sorta like how that one kid did to Uber and Rockstar Games.

[@b.bergeron8769]

Hey, Outlaw, Video on how to mitigate these bs? Thanks.

[@thecashewtrader3328]

This

[@asialsky]

Garbage like this is why I like my tethered internet. Most applications refuse to acknowledge a tethered phone as a valid internet connection, meaning there's one more obstacle for spyware. Oh, and add in a VPN. Seriously, use a VPN. Now. Do it.

[@Chris-rm1pn]

Power10 is coming boys, octathreading and PB of ram, now only make it affordable 😅😂

[@MICKYLEAKSMGR-PRESIDENTCJWORLD]

Brother, can you please do a video on List of Laptops/Desktops (or post a link in description to a blog/s) which don't come with the IME AMT or TrustSecure(AMD) risks? Or maybe a demo video of if you're using later/latest model laptops how you disable these risks/backdoors? 2007&< and maximum 2011 I guess were some models that didn't? I am unable to get parts on an old laptop that would suit my purpose perfectly for now! Would really appreciate the same. Great videos as always.

[@MICKYLEAKSMGR-PRESIDENTCJWORLD]

@@trtrhr I know that's why I asked for any models people have found from personal experience that has no security issues like that

[@meinland4439]

@@MICKYLEAKSMGR-PRESIDENTCJWORLD pretty much all new hardware has this shit man. To say the least, it is un-ironically over!

[@MICKYLEAKSMGR-PRESIDENTCJWORLD]

@@meinland4439 Yep! You Betcha. Every OS device App etc for tracking Whacking TF out of those who refuse to be Sheeple or Genocide mind controlled Slaves and Test Subjects of Illegal&Criminal MedicoMilitary Experiments. I've already beat them all in Court and Death Penalty Prosecuted for them. ZERO PUBLIC DISCLOSURE POCSO ACT 2012 HIGH TREASON SEDITION TERRORISM ROWDYISM TYRANNY PERJURY 420 FRAUD&FORGERY LIBEL POTA&GOONDA ACT PHR ACT 1993 UAPA RTI ACT 2005 EVIDENCE ACT FOIA Illegal&Criminal Surveillance Espionage Sabotage Political COUP being Played Out Freely! Madras High Court AFC1&5 2065/16 TNSHRC NHRC 9269/16 Supreme Court UN UNICEF ICC&ICJ OTP-CR-503/18 ALL GUILTY OF AIDING&ABETTING THE #PEDOGATE #POLITICALCOUP WORLD RECORD CRIMINAL CONSPIRACY, MY BABY HOSTAGE FOR BLACKMAIL 6YEARS 8MONTHS ZERO REMEDY! NO FIREARMS NO PSOs NO MEDIA DISCLOSURE AS PER LAW INTERNET GIANTS THEMSELVES CAUGHT!

[@dadecountyboos]

Couldn't good ole Bill put backdoors in PopOS since he is on the Board, now? I ars understand System76 doesn't use this intel crap... I would imagine this would still be a rubicon he could cross. Everyone would have a price that he could most certainly double...

[@GabrielM01]

These arent vulns these are features, those "bugs" are actually what they use to spy on you

[@GabrielM01]

@@trtrhr yeah yeah. thats what i meant

[@mekuranda]

OK - I have read everyone's responses and this is left field - if using KVM virtualisation and doing your sensitive work in a Guest - what access could these CVEs etc have to your running applications - or have these devious people already anticipated that and found a flaw in virtualisation/containerisation etc? Since you can elect to specify a variety of CPU's it seems that it could work - but hey what would I know?

[@oventree]

virtualization doesn't matter if they're able to fully control the hardware running virtualization

[@mindfields88]

before trying to reflash the bios and use a program like ME_cleaner to remove most of the ME's functionality (if it can be achieved to the most extent), can you remove the wireless card (effectively removing the access of your computer to the internet) and stop the ME if it was broadcasting your data or does this engine have a SEPARATE wireless connector device on its own? I work with more than one computer obviously, so I'm not shutting down my access from the internet

[@exu_skully8728]

Thanks man, love your videos

[@xyzzy-dv6te]

Nice Team Fortress Classic profile pic

[@exu_skully8728]

Gotta love good 'ole tfc

[@Scoopta]

Dude, the way you refer to the alphabet soup of american agencies is the absolute best

[@oniruddhoalam2039]

Intel ME is present on the pch not cpu in non-soc models.

[@s1gm4_4c4d3my]

can we use the exploit to "disable" me ?

[@GabrielM01]

system76 has talked about how to disable it, not really disabling it, but taking functions out and leaving only the necessary for boot

[@ikcikor3670]

Man, if it was open source then everyone would attempt blocking it.

[@zCaptainz]

I have an x79 motherboard from Aliexpress. The frankenstein boards they make there from scraps and bits and pieces of other boards. There's an option in the BIOS to disable Intel ME. Not sure it actually does anything...

[@ChucksSEADnDEAD]

It would be ironic if the kitbashed "CHAY-NAH" motherboards were more secure.

[@zCaptainz]

@@ChucksSEADnDEAD Well... They actually do strip all the components from random boards. And they do actually have factories where they put it all together. The silicon, all the connections, the socket, everything... And I'm not sure if the ME is actually embedded in the CPU (if yes, this toggle isn't real). But I think I've heard it's actually in the motherboard's chipset, and they really do use custom chipsets. Not actual x79. It's got only 1 or 2 SATA3 ports, rest are SATA2. Windows can't identify the chip. Really basic crap just to make it (sometimes barely) work properly... So. Idk

[@prawny12009]

@@ChucksSEADnDEAD more likely to have a altered version of the vulnerability through their own hacked firmware. You buy a cheap refurbished or off brand device only to find your system is open to CCP rather than NSA

[@ChucksSEADnDEAD]

@@prawny12009 No idea why your comment seems to be hidden, but yeah it's always a gamble. The Chinese "informal economy" is pretty large so I don't even know if they care enough to force that kind of vulnerability since those computers will never be used on critical applications. Their ability to scheme against us is only rivaled by their ability to not care.

[@badnamewolfie7789]

Check your privilege, Intel XD

[@daras3579]

RISC-V powered consumer pcs when?

[@daras3579]

@@javaman4584 😢😢😢

[@thecashewtrader3328]

Yay

[@JimmyCarter1976]

2 more weeks!

[@madocworks1147]

This is why I have AMD processor..*whisper*..wait AMD has remote management too? F***!

[@slka3272]

Ok so let's say they open source the code. Will we be able to access on our hardware or only see it on Github or sth and trust that they put the same code on it?

[@DMalenfant1]

Company based in Israel, our greatest ally. No more needs to be said.

[@DMalenfant1]

@Imix Muan calling someone antisemitic is a red hearing. More like you are anti-gentile elitist.

[@Jay-wb7hw]

@Imix Muan lol ??? So anyone that says anything against Israel is anti Semitic ?

[@MichalKoziatek]

So what processors should we use? It seems to me there isn't much choice. AMD has similar issues I heard somewhere

[@nhansgoofyvideos7581]

68k

[@MichalKoziatek]

@@nhansgoofyvideos7581 they're a bit dated now , right 😅 I was thinking about any modern processors

[@filipesantos3745]

OpenPower and SPARC CPUs are the viable way now. Maybe RISC-V in some years

[@theterribleanimator1793]

System76 has this ME shit disabled by default. How they do it? dont know but it seems legit.

[@overloader7900]

A cpu from somewhere early 200x. They only got ~2-4 times faster over years non-simd single core, and soydevs are too lazy to use threads/simd or even set good -O flags The only problem is to get enough RAMs

[@luigitech3169]

I understand China that wants to make their cpus

[@Scoopta]

Got curious as to what that CVE actually ended up being rated...9.8...doesn't get much worse than that...

[@SomeOne-mo7uw]

FIX: get a raspberry pi for your internet use, then use your Windows PC 'offline' as workstations for music and video production and offline gaming - no ME!!

[@ThePortuguesePlayer]

In AMD CPUs, do these management engines (AMD PSP in AMD's case) have anything to do with AMD-V? Is there a relation?

[@BenMDepew]

Does AMD also have spooky security holes in their processors like back-doors?

[@senselessnothing]

yes from what i remember

[@terranokes9585]

Yes same issue

[@stuffthings7084]

Israeli Mossad Engine

[@tyh2989]

Just how old would your hardware need to be to be unaffected by this?

[@meinland4439]

On the intel side anything before 2008ish on the amd side anything before 2012-2013ish

[@_azaad_]

Time to buy a RISC-V processor (somehow)

[@mekuranda]

Is what System76 do a reliable and dependable solution? I am due for a new PC and believed that my old I7 processor was before all this covert extra functionality was a concern!

[@3lH4ck3rC0mf0r7]

It's the best that we can currently do. Going further would require either a hardware approach or a crack in Intel's cryptography (I think it's more likely that they could start decapping Intel CPUs to physically cut out the ME core and its auxiliary mechanisms from the rest of the system, or overwrite Intel's ME root certificate on the processor die with extremely precise factory tools). In newer CPUs, you cannot fully disable the ME firmware because if the ME doesn't report back to the CPU, the computer will auto-shutdown in 30 minutes. It can't be reimplemented either, because the modules and several other parts of the firmware blob are signed.

[@mekuranda]

@@3lH4ck3rC0mf0r7 So should I be looking at an ARM based PC instead....?

[@3lH4ck3rC0mf0r7]

@@mekuranda All main CPU architectures contain these execution environments in some capacity. AMD has PSP, Intel has ME, and ARM has TrustZone. Not to mention, as far as I'm aware, only Apple is designing ARM-based PCs, and Apple is out of the question. me_cleaner (made with the research of, and used by the folk at Purism and System76) actually does a pretty good job though. During the first few stages of boot (when the computer has yet to show anything on the screen), and after the chipset has validated the ME properly, the ME microkernel crashes right after, and this halts the ME completely. So during most of the PC's runtime, the ME is indeed verified to be completely inactive (and the little code that does get to run looks safe as far as anyone can tell..?) As for all the "own network stack" stuff of the ME, it only really applies to the onboard Ethernet port in the motherboard. If you use an USB Wi-Fi adapter, for example, the ME is still theoretically able to access it, but simply can't contain the drivers to manage every single one of those out there (as long as the OS isn't lending the ME its stack so it can access the Internet like any normal program instead)

[@mekuranda]

@@3lH4ck3rC0mf0r7 Thank you for the detailed explanation...I really appreciate the detail ....I will look toward a System 76 PC .

[@3lH4ck3rC0mf0r7]

@@mekuranda Correction: I've checked a little, and other ARM laptops besides Apple's do exist. I have no idea what they are like, though.

[@mobrine8659]

Don't knew how they aren't sued

[@nixietubes]

Im not even very concerned about my security but I love your lingo so much, spooky town, alphabet boys, its so cute

[@obfuscateidentity2329]

How to host a service/server if you can not open ports on your router? ISP has me locked out of router.

[@Vanlifecrisis]

Well since there are only 2 options and both went evil, then what can we do? They make these chips at the microscopic level, you cant just make your own.

[@Rajporus19]

But what about AMD ? What should we worry about ? There must be some kind of spooky equivalent

[@samarthhawaldar9931]

Even AMD has a similar thing going on.

[@Rajporus19]

@@samarthhawaldar9931 Yes but what is the name of it ? Or do you have a website that you can link me to so I can search about ? Thanks in advance !!

[@samarthhawaldar9931]

@@Rajporus19 AMD PSP I think

[@Rajporus19]

@@samarthhawaldar9931 Thanks !

[@Pieguy223]

Intel(ligence agencies) Inside(your house)

[@ES-qe1nh]

Oof

[@PR0XIDIAN]

System 76 laptops have intel ME disabled

[@Canadian789119]

Intel Virtualization. Pretty much virtualization your whole OS.

[@buddysievers9964]

I never buy an Intel Cpu again. Ryzen is the way to go now!

[@premier69]

how bad is it for me that only has AMD throughout all my compontents? I'm sure intel has circuits on pretty much everything on one level or another?

[@MatthiasLee1]

open sourcing your software is like hiring the whole world of software engineers, but for free

[@jpsouzamatos]

Which hardware do you recommend?

[@Nikkk6969]

There’s gotta be a way to disable it even physically

[@ultra.based.27]

Before the "pandemic" I didn't have to worry about all this stuff, i could just live my life normally, god damn it.

[@kimmiek3763]

What laptop brand can help with this? Does sys76 actually destroy it

[@versusgeorge]

Listen I've been watching your videos recently and never have I seen you asking to subscribe to your viewers

[@crane8098]

What about laptop?Can I some how turn it off?

[@marc-andreservant201]

I ran me_cleaner (HAP-bit only due to verified boot on my laptop) and now Netflix complains that my machine doesn't support SGX. That's unfortunate (Yarr!)

[@superboo07]

don't use the netflix windows app, the browser version is way better

[@gen0megen0me93]

Its instruction set is even unfamiliar with risc or x86 architecture..

[@Ironclad17]

CIA Inside

[@LarsUriel]

I wonder if the Vishera processors have that psp garbage in it or nay

[@AK-hf3pf]

Mossad engine, nice

[@kim-hendrikmerk4163]

Lets all get system 76 laptops without Intel management engine.

[@domanit927]

8:00 (add this)"unless you don't have an intel cpu"

[@invictusdomini8624]

>bioluminescent Incorrect. They don't glow from biological processes, they glow from all the barium they consume in their meals. See: Barium Meal Test.

[@realGBx64]

Did anyone got an Intel ad before this video?

[@thecashewtrader3328]

Adblock

[@Thedude897]

We should all come together and buy a lot of government laptops since government cpus won't have Intel me

[@GabrielM01]

AMD FX here 2011 amd cpu o-o

[@sharoyveduchi]

Post about Elbrus CPUs

[@SimGunther]

In Soviet Russia CPU runs you!

[@thecashewtrader3328]

Wow

[@euphoriam4020]

We need to do something about these glow-reggins.

[@stevengill1736]

Waitaminnit - they have this tech in servers too? Crazy.....

[@IsoMacintosh]

Remote management is really important in servers so yes, though often they use better solutions than intel AMT, but those too have their own processor and a mac address which allows neat stuff like installing a new OS purely through remote lan connection.

[@ogamibirdflu5152]

Wait wait wait. Wasn't the Intel backdoor done in Israel? Wasn't it designed in Israel? That's more like Unit 8200 then NSA. I'm not discarding the NSA and all their dirt but this was "an Israeli company."

[@Ivan-bl8fy]

That's the reason why we should move to ARM

[@MsHojat]

Are these just more local exploits though? Last big (bigger than this or really any other) IME exploit I heard about was a local one which was a _good_ thing for end-users as it means that they could use it to take control of it for themselves. At the least it's not an issue for them due to it still requiring local physical access. Only people needing to worry about local exploits are like huge businesses worried about internal hackers. edit: I watched more of the video and it seems like this isn't the case for some of the first ones, but wasn't the last one covered done via local access?

[@aleksic1234]

Am I the only one that doesnt understand the “glow in the dark” stuff?

[@thecashewtrader3328]

Glowie = govt

[@splatbot8091]

How would one avoid this problem though? I legit want to know because this really do be spooky. Is amd better about this?

[@Vanlifecrisis]

AMD pinky swears that if you disable it in the bios of some motherboards, it won't continue operating anyway. Up to you to believe the company that put it there in the first place.

[@shawn.mp4832]

System 76 has the chip removed although i have no proof it kinda feels too good to be true. Call me paranoid but it just feels like a honeypot. Hopefully I'm wrong because if I am then ill get one

[@bitterlemonboy]

I wish I had an older PC....