Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you are worried about this un-vetted blob, it means you don't trust Intel; if you don't trust Intel, why does it matter that they have this blob running in 'god' mode? They ARE the CPU, so they aren't just god 'mode' they are god itself.

You are trusting the CPU to do what you ask it to do. If intel were to do something shady, they wouldn't need a un-vetted blob of code to do it, they could do it directy in the CPU itself.

I guess my point is that you have to trust the CPU manufacturer, whether they have this code or not.



You are partly correct, but I think you're overlooking some things. I agree that we realistically have to trust Intel that their CPUs will do what the code tells them to. However, in this case they're actually telling us that the ME chip has overriding control over the system, that we can't tell the chip what to do, and that they won't tell us exactly what it's doing at any time or allow inspect the code its running. That isn't the case for their CPUs. This also opens up the possibility of a third party either finding a vulnerability in the code that we don't have access too, or simply gaining access to Intel's code signing keys, and using it to attack our computers. That's possible if the code works as designed, whereas that does not apply to CPUs.


Yeah, I guess my comments was assuming the trust was of the type 'trust not to do something nefarious' rather than 'trust not to have a vulnerability'. You make a good point about the latter being a more serious concern in this case.


Maybe you've got it backwards? Maybe many people trusted Intel until they learned about the ME and how hard it is to switch it off, and the fact that if you switch it off you should use a special flag requested by the NSA that was previously unpublished.

I certainly trust Intel way less than before some of the more fishy details about the Intel ME got out.


Intel's grown so big that you can't just do that anymore. Who's to say there ever won't be one employee on his last day with less ethics than you.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact