- Welcome to Zero Labs Forum.
Zero Labs Forum
Just build something!
Recent posts
#31
General Discussion / Intel Management Engine securi...
Last post by zero - December 11, 2017, 06:09:05 PMThis weekend I was searching for a BIOS update for my home computer with Intel DQ57TM mobo. This led me to the Intel web site and discovered a security bulletin regarding the Intel Management Engine released May of this year. Basically, it's the mother of all back doors, the sort of stuff that only movies dreamed of, complete remote access to every aspect of your computer, built right into the hardware. It basically reaffirmed for every security conscious IT pro that the name Intel is more than just a coincidence. It's what they gather and help others gather from us every single day, a secret little inside joke played on us all. And P.S.: It's been in place since 2010. This rabbit hole is very, very deep.
In May, under intense pressure, Intel finally admitted to it and released a firmware update that is supposed to close their back doors. We are asked to believe their benevolence with this update and trust that it really does what they claim it will. Sure gives me a warm fuzzy. How about you?
On some machines the Intel ME is a firmware update, independent of the BIOS. They call it an "OS Independent" update, despite the fact that it will only run from a winblows booted environment. I have yet to get it to install on my home Linux machine even though booted from multiple flavors of WinPE on boot disk. Forum threads are filled with complaints from Linux users blasting Intel for their obvious indifference toward the open source community and unwillingness to publish an update tool for Linux. They do publish a Linux vulnerability detection tool which I used to confirm the security flaw. But when it comes to actually patching it, seems I'm SOL. Still searching for a workaround.
On other machines like my work E5440 laptop and many Optiplex models, the Intel ME is integrated with the BIOS. I ran the SA-00086 vulnerability detection tool published by Intel and it reported my computer is already patched. I'm not sure I believe it since the Intel web site indicates a BIOS update with the patch for the E5440 is not due from Dell until 1/2/2018! Translation: "Yeah, we know. We'll get around to it, when we're damn good and ready."
Regardless, I strongly encourage everyone to run this detection tool on their computer, especially on servers.
Bottom line: I think Intel SUCKS! I think they're in bed with the Deep State. I think they cannot be trusted. I think I will start migrating all of my personal computers to AMD based processors!
In May, under intense pressure, Intel finally admitted to it and released a firmware update that is supposed to close their back doors. We are asked to believe their benevolence with this update and trust that it really does what they claim it will. Sure gives me a warm fuzzy. How about you?
On some machines the Intel ME is a firmware update, independent of the BIOS. They call it an "OS Independent" update, despite the fact that it will only run from a winblows booted environment. I have yet to get it to install on my home Linux machine even though booted from multiple flavors of WinPE on boot disk. Forum threads are filled with complaints from Linux users blasting Intel for their obvious indifference toward the open source community and unwillingness to publish an update tool for Linux. They do publish a Linux vulnerability detection tool which I used to confirm the security flaw. But when it comes to actually patching it, seems I'm SOL. Still searching for a workaround.
On other machines like my work E5440 laptop and many Optiplex models, the Intel ME is integrated with the BIOS. I ran the SA-00086 vulnerability detection tool published by Intel and it reported my computer is already patched. I'm not sure I believe it since the Intel web site indicates a BIOS update with the patch for the E5440 is not due from Dell until 1/2/2018! Translation: "Yeah, we know. We'll get around to it, when we're damn good and ready."
Regardless, I strongly encourage everyone to run this detection tool on their computer, especially on servers.
Bottom line: I think Intel SUCKS! I think they're in bed with the Deep State. I think they cannot be trusted. I think I will start migrating all of my personal computers to AMD based processors!
#32
General Discussion / I NEED TO VENT ABOUT GMAIL!
Last post by zero - December 06, 2017, 01:08:30 AMIs anyone else in this boat?
I travel. Frequently. And every time I do, any time I try to get my gmail I am thwarted with blocked sign in attempts, security alerts and warnings that basically say "OMG!!! SOMEONE HAS YOUR ParseWORD!!! TIME TO PANIC!!!!!!!!!!"
WTF??? I mean SERIOUSLY??? I have relaxed every possible security setting I can find and STILL I am faced with roadblocks and hoops to jump through just to get my friging email!!!!!!! I AM SO PISSED OFF RIGHT NOW I COULD STRANGLE SOMEONE AT GOOGLE TO DEATH!!!!!
I travel. Frequently. And every time I do, any time I try to get my gmail I am thwarted with blocked sign in attempts, security alerts and warnings that basically say "OMG!!! SOMEONE HAS YOUR ParseWORD!!! TIME TO PANIC!!!!!!!!!!"
WTF??? I mean SERIOUSLY??? I have relaxed every possible security setting I can find and STILL I am faced with roadblocks and hoops to jump through just to get my friging email!!!!!!! I AM SO PISSED OFF RIGHT NOW I COULD STRANGLE SOMEONE AT GOOGLE TO DEATH!!!!!
#33
Wind / Re: Personal
Last post by zero - December 01, 2017, 03:04:50 AMIt's all good. However, there are consequences for hurling nasty insults at the forum owner. Planet Earth is expelled.
#34
Wind / Re: Personal
Last post by Ozone - November 27, 2017, 08:32:21 PMI seem to have started something, correct guess, smell a bit also 
#35
Wind / Re: Personal
Last post by Planet earth - November 22, 2017, 10:03:15 PMNot very much of one if you only reply after over a month.......TWAT
#36
Wind / Re: Personal
Last post by zero - November 18, 2017, 02:05:45 AMPerks of being the forum owner. 
#37
Wind / Re: Personal
Last post by Planet earth - October 16, 2017, 08:54:45 PMI agree fully with you "tickover" how can such an arsehole have such a high karma........Karma: +65534/-1, what does the twat think he is doing?
#38
General Discussion / Re: Say Hello!
Last post by Planet earth - October 16, 2017, 08:47:51 PMHi Zero, Friends have recommended me to take a look and say hello, so Hello, i hope the visit and site is worthwhile.
#39
Wind / Re: Personal
Last post by tickover - October 11, 2017, 08:40:09 PMProbably from the rear end, probably stinks a bit, just like you Zero
#40
General Discussion / Re: Say Hello!
Last post by tickover - October 11, 2017, 08:20:02 PMHi Zero and all, newbie to forum hopefully find good stuff......Tickover