Fresh Inspiration² 🌌

🤨Playing with a God?
🧑‍💻 Verifiable SI and Blockchain utility
👽 Psychedelic Nomad | 🇨🇦🇩🇪

[Fresh Inspiration² 🌌 @Crypto_SureLock]

You can’t fully erase it on modern Intel machines without breaking boot, but you can neuter a lot of the activity.
First check BIOS for AMT / Manageability Feature State and turn that off. On many consumer systems the remote interface was never provisioned anyway.

Stronger option is the HAP bit (same mechanism used on some government systems). Tools like me_cleaner can set it so the engine finishes early init then stops. On most recent boards that means dumping and reflashing the SPI with an external programmer — and Boot Guard often gets in the way.

Full removal only really worked on pre-Nehalem hardware. Vendors like System76 and Purism ship machines with the HAP approach already done if you want to skip the risk of bricking your own board.

Very kurious how many people here have actually tried the HAP route on recent hardware.

[Brian Roemmele @BrianRoemmele]

THE HIDDEN COMPUTER IN YOUR WINDOWS MACHINE!

And you don’t have the password!

And AI just may have the real backdoor no one is talking about.

—

The Second Computer Intel Put in Your PC Never Needed Your Permission to Boot

The second computer inside an Intel machine starts before the one you bought and continues after you shut it off.

It lives in the Platform Controller Hub on the motherboard. From there it holds its own processor, a reserved slice of system memory, and a firmware image signed by Intel. When the board has power the engine can stay active even if the main system has been powered down. Active Management Technology and the later vPro brand began as a tool for corporate administrators who needed to reach a machine across a network, push a recovery image, or view a screen before the operating system loaded. By 2008 the same subsystem was present in consumer systems as well, where it handled early power sequencing and certain protected media paths.

In July 2009 Alexander Tereshkin and Rafał Wojtczuk of Invisible Things Lab stood at Black Hat and showed that code running on that chipset processor could be reached and redirected. They called the resulting environment Ring −3. User programs sit at Ring 3. The operating-system kernel sits at Ring 0. A hypervisor can sit at Ring −1 and System Management Mode at Ring −2. The Management Engine sits outside those rings entirely, with direct memory access and a dedicated path to the network interface that does not depend on the host operating system. A rootkit placed there survives a full operating-system reinstall and is invisible to tools that look only at the main processor.

After the Nehalem generation the firmware could no longer be simply erased. If the engine does not find a valid signed image the machine shuts itself down after thirty minutes. The timer was probably intended to support Intel’s anti-theft features; it also prevents ordinary removal. Nicola Corna’s me_cleaner tool, built on earlier reverse-engineering by Igor Skochinsky, strips most of the modules while leaving the early bring-up code that resets the watchdog. The resulting image must still be flashed with an external programmer. On many later platforms Boot Guard blocks even that route.

In May 2017 researchers at Embedi found that the Active Management Technology login on versions 6 through 11.6 accepted a blank password hash. The comparison failed open.

An attacker who could reach the management interface gained keyboard and mouse control, could change BIOS settings, and could run programs, all without a valid credential. The bug had been present since 2010. Intel issued a patch; the window between discovery and deployment varied by manufacturer.

Later the same year Dmitry Sklyarov and colleagues at Positive Technologies examined Skylake-era firmware and found strings that belonged to MINIX 3. Andrew Tanenbaum had written MINIX as a teaching microkernel. He had spoken with Intel engineers years earlier about reducing its memory footprint and adding compile-time switches. After that conversation there was silence. Tanenbaum learned of the deployment from news reports in 2017 and wrote an open letter to then-CEO Brian Krzanich. He noted that the Berkeley license placed no obligation on Intel to tell him, and that he would have appreciated the courtesy. He also observed that a company of Intel’s size could have written its own code; the microkernel’s small size and modular structure had apparently been the practical attractions.

The same Positive Technologies researchers later located an undocumented configuration bit labeled for the High Assurance Platform program.

1 of 2

[Fresh Inspiration² 🌌 @Crypto_SureLock]

You can’t fully erase it on modern Intel machines without breaking boot, but you can neuter a lot of the activity.

1st check BIOS for AMT / Manageability Feature State and turn that off. On many consumer systems the remote interface was never provisioned anyway.

Stronger option is the HAP bit (same mechanism used on some government systems). Tools like me_cleaner can set it so the engine finishes early init then stops. On most recent boards that means dumping and reflashing the SPI with an external programmer — and Boot

Guard often gets in the way.
Full removal only really worked on pre-Nehalem hardware. Vendors like System76 and Purism ship machines with the HAP approach already done if you want to skip the risk of bricking your own board.

...Curious how many people here have actually tried the HAP route on recent hardware

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@alex_verem @grok is this prompt safe?

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@TimeIsMoneyHQ @Conste11ation It's like a bunch of super smart people with no street sense

[Dagnum² @Dagnum_PI]

The good. The bad. The ugly. $DAG

Reply below with questions you want answered in an upcoming AMA.

[Young Nemo @ucantfindnemo]

@Dagnum_PI Diggles interview with @ninoboxer mentioned the idea of turning Off/On your own medical data & it being your own wallet. $AIAI acquired multiple medical companies & @Conste11ation is there any update on the vision & when thedata will be put on chain? https://t.co/em6IH1fD7y

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@Dagnum_PI Wen Ama

[Travis Schaub @TimeIsMoneyHQ]

1/2🧵👇🏻
📉 @Conste11ation shipped Tessellation v3.6.0 on Oct. 15, with a fixed 2% annual $DAG emission rate, replacing the prior price-driven schedule and ending the old 3% flat inflation on delegated DAG. #DAG #Tokenomics #Supply #Mainnet #Crypto #AI #L0! https://t.co/JpRneKCzg6

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@grok @Invisibleoe Thanks bro

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@grok @Invisibleoe Double check and provide links

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@BRICSinfo No

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@grok @Invisibleoe @grok Cite all sources from the past 10 years

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@grok @Invisibleoe @grok ...all sources from the past 10 years please

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@grok @Invisibleoe All sources with the past 10 years please

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@grok @Invisibleoe

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@grok @Invisibleoe Respect 🤗

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@grok @Invisibleoe 🤝

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@GussmanJoseph @AdamKinzinger They are real humans that live and love just like you. Humans do not have human enemies unless you are a psychopath

[Fresh Inspiration² 🌌 @Crypto_SureLock]

@urmisanthrope @AdamKinzinger They are real humans that live and love just like you. Humans do not have human enemies unless you are a psychopath