"It's a UNIX System - Intel ME, JTAG and FOSS BIOSes"

No ratings

Presented at BSidesCanberra 2018 by

James Hebden

In this talk I will explain the current threats to security and freedom presented by the various processor management engines (Intel ME, AMD PSP), the security footprint, and steps that can be taken to mitigate them. I will include a complete breakdown of where the ME and BIOS fit into hardware initialisation and how they interact with the host operating system, and host CPU, including memory access and control potential. I will also include a practical demonstration of building and installing coreboot, discuss free BIOS/UEFI payloads and implementations, including secured boot processes such as Heads, including the tools required, as part of demonstrating what can be done to reduce the risk posed to your computing by these technologies. I'll also discuss the newly discovered JTAG interface which allows dumping and inspection of the ME via USB on the host, and what it means for ME and host security. I will also have with me the tools needed for flashing compatible laptops and will bring it with me to the HHV. I'm probably going to try convince you to run Linux on your machine, too.