Intel's Secret CPU-On-Chip Management Engine (ME) Runs on MINIX OS

Solarquest

Moderator
Thread author
Verified
Staff Member
Malware Hunter
Well-known
Jul 22, 2014
2,525
One of the world's lesser-known operating systems may actually be the most used OS in the world, according to new revelations made by Google's Linux experts.

The culprit is MINIX 3, an open-source and highly modular UNIX-like operating system that was designed to work on microkernel architectures.

The OS was launched in 1987 as an educational project by Dutch professor Andrew S. Tanenbaum, who wanted to show students that they don't need to write millions of lines of code to create a basic, functional operating system.

Intel ME runs on MINIX, Google finds
According to Ron Minnich, a Software Engineer at Google, MINIX is at the heart of Intel's Management Engine (ME), a secret processor embedded in all Intel CPUs sold in the last decade.

Despite many people calling ME a backdoor into everyone's computers, Intel has always advertised ME as a way for companies to manage workstations on internal networks by allowing system administrators to monitor, maintain, update, upgrade, and repair Intel-based computers from a remote, central location.

This is because the ME component runs independently from the user's main OS, with separate processes, threads, memory manager, hardware bus driver, file system, and many other components.

MINIX creator reveals Intel's past interest in the OS
Google says MINIX power all these features, a statement the MINIX OS creator has backed up yesterday in a blog postaddressed to Brian Krzanich, Intel's CEO.

...
Google cited worries that the Intel ME (actually MINIX) code runs on their CPU's deepest access level — Ring "-3" — and also runs a web server component that allows anyone to remotely connect to remote computers, even when the main OS is turned off.

For a company that holds information on almost all Internet users, Intel ME is a gaping security hole its engineers are now actively trying to nuke off their systems.

Researchers found a way to disable Intel ME over the summer
...
 

Windows_Security

Level 24
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Mar 13, 2016
1,298
That is really asthoning news :cautious: Imagine the first one to be able to hack this, with system rights and access you would be laughing your head off.

The Terminator movie always had a technology wise dodgy backdoor which enabled the AI machines to take over the world. But it is not Science Fiction, it really exists and is embedded in 75% of the PC's in the world: Intel's Active Management Technology :eek:

upload_2017-11-9_2-23-13.png


@Solarquest (y) find
 
Last edited:

DeepWeb

Level 25
Verified
Top Poster
Well-known
Jul 1, 2017
1,396
I read another article on hacking ME a few weeks ago and essentially what security researchers discovered is that Intel did their job and it's nearly impossible to hack even before the vulnerability was patched unless you do a certain thing at a certain time during boot, under the right conditions, considering all other security mechanisms are disabled etc. Intel engineers know how to secure their processor. But what's more, people who write malware will always go the path of least resistance. I don't even think that the CIA would try to bother. It's not about making it impossible to hack because that is impossible. Everything can be hacked. But, Intel made it hard enough that practically nobody will bother expending the energy and time to hack into their Management Engine.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top