{"guid":"581ccbad-4bbf-47a2-8845-f52278d61061","title":"Intel ME: Myths and reality","subtitle":null,"slug":"34c3-8782-intel_me_myths_and_reality","link":"https://fahrplan.events.ccc.de/congress/2017/Fahrplan/events/8782.html","description":"Many claims were made recently about purpose and capabilities of the Intel ME but with all the buzz it is not always clear what are facts and what is just speculation. We'll try to clear the fog of misunderstanding with research based on investigations of ME firmware and practical experiments on ME-equipped hardware.\n\nWe would like to cover the most common claims about the ME, based in part on the new research done in the few last years such as complete recovery of the proprietary Huffman compression which previously hindered research into some parts of the ME firmware, as well as describe what steps can ordinary users take to reduce the attack surface exposed by the ME.\n\nSome of the claims we plan to  cover:\n\n• It's a  backdoor made for NSA and serves no useful purpose\n• It is always on even if the PC is turned off\n• It can read all data on PC/spy on the user\n• It can't be disabled\n• It can lock the PC with a command sent over the air\n• It a black box which can't be audited because it's closed source\n• End users can't do anything about it. \n\nTogether with the talk we're planning to make available detailed notes on reverse engineering of the ME firmware with some pointers to the identified functionality for other interested researchers.\n","original_language":"eng","persons":["Igor Skochinsky","Nicola Corna"],"view_count":10102,"promoted":false,"date":"2017-12-28T00:00:00.000+01:00","release_date":"2017-12-29T01:00:00.000+01:00","updated_at":"2026-07-31T18:45:04.467+02:00","tags":["34c3","8782","Security"],"length":3753,"duration":3753,"thumb_url":"https://static.media.ccc.de/media/congress/2017/8782-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2017/8782-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2017/581ccbad-4bbf-47a2-8845-f52278d61061-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2017/581ccbad-4bbf-47a2-8845-f52278d61061-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/34c3-8782-intel_me_myths_and_reality","url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_title":"34C3: TUWAT","conference_url":"https://api.media.ccc.de/public/conferences/34c3","related":[{"event_id":4763,"event_guid":"2ef3b60f-6e5c-4c23-a145-d263685ec13e","weight":111},{"event_id":4766,"event_guid":"19b7e5d7-bba7-46da-afbc-f16d43fe395f","weight":138},{"event_id":4767,"event_guid":"f2ca3661-30c8-476e-9d6b-920bb20b21eb","weight":82},{"event_id":4784,"event_guid":"65a25dfd-56dd-4e87-a910-334e2dc25a9c","weight":493},{"event_id":4794,"event_guid":"a2887b4a-0c9d-4220-a52f-c65c20ae25d7","weight":111},{"event_id":4795,"event_guid":"722ce759-9cde-4e3b-8db5-5a97aa9673d9","weight":91},{"event_id":4796,"event_guid":"ff24373e-ebe2-4077-9db0-eae5ab003538","weight":98},{"event_id":4800,"event_guid":"a9ebf7e3-abc5-49d9-8efe-316b3bc52902","weight":50},{"event_id":4804,"event_guid":"0cccbcdd-1e5c-4457-883b-6141c04d754c","weight":87},{"event_id":4817,"event_guid":"be19fbe3-e825-4e67-93f9-a6aeda2e31af","weight":87},{"event_id":4821,"event_guid":"aed02b65-9a16-4a42-ac28-2883da680d0a","weight":75},{"event_id":4823,"event_guid":"bf924a39-2860-4e27-8741-b8fa0c010363","weight":100},{"event_id":4826,"event_guid":"16645200-2036-4a3c-a44d-a5ff44ac2991","weight":207},{"event_id":4832,"event_guid":"275f85de-d612-4440-8755-85dee5912f12","weight":133},{"event_id":4833,"event_guid":"e1a60f7b-6a56-4dce-ab3a-c686fa940aa8","weight":222},{"event_id":4837,"event_guid":"664f6c37-2fab-4191-a5d6-042aba7518c3","weight":80},{"event_id":4843,"event_guid":"86c60da2-fefc-4750-ad22-fa821ce619b1","weight":82},{"event_id":4844,"event_guid":"5c5e888e-4556-405b-a205-e59b97db99e1","weight":104},{"event_id":4845,"event_guid":"c21cb389-aba3-4eaa-ba1f-76f966b1686e","weight":78},{"event_id":4846,"event_guid":"832b8fb8-beb1-4d92-93d0-ba3b7568905a","weight":83},{"event_id":4850,"event_guid":"949bee69-3be0-4cc8-915b-5f1167141dcc","weight":74},{"event_id":4852,"event_guid":"77aaf0be-d2a8-4531-be02-c91c19b1ca77","weight":75},{"event_id":4855,"event_guid":"51b586be-500c-436e-b70c-fc433e65c4be","weight":99},{"event_id":4856,"event_guid":"c5bfac96-8290-438a-a47a-ebdbf0ab5365","weight":85},{"event_id":4866,"event_guid":"117a52b4-f675-49dd-aafe-659c07b6bc9c","weight":130},{"event_id":4909,"event_guid":"03ba9edb-1d3a-4774-9384-7548c0696df7","weight":84},{"event_id":4929,"event_guid":"8e222759-cd6b-403b-8fe1-3517bf7d2802","weight":127}],"recordings":[{"length":3753,"mime_type":"video/mp4","language":"eng","filename":"34c3-8782-eng-Intel_ME_Myths_and_reality.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-29T01:33:44.186+01:00","label":"eng 1080p","size":237,"recording_url":"https://cdn.media.ccc.de/congress/2017/h264-hd/34c3-8782-eng-Intel_ME_Myths_and_reality.mp4","url":"https://api.media.ccc.de/public/recordings/21372","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"length":3753,"mime_type":"video/mp4","language":"deu","filename":"34c3-8782-deu-Intel_ME_Myths_and_reality.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-29T01:33:58.716+01:00","label":"deu 1080p","size":237,"recording_url":"https://cdn.media.ccc.de/congress/2017/h264-hd/34c3-8782-deu-Intel_ME_Myths_and_reality.mp4","url":"https://api.media.ccc.de/public/recordings/21373","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"length":3753,"mime_type":"video/mp4","language":"fra","filename":"34c3-8782-fra-Intel_ME_Myths_and_reality.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-29T01:34:08.274+01:00","label":"fra 1080p","size":237,"recording_url":"https://cdn.media.ccc.de/congress/2017/h264-hd/34c3-8782-fra-Intel_ME_Myths_and_reality.mp4","url":"https://api.media.ccc.de/public/recordings/21374","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"length":3753,"mime_type":"video/mp4","language":"eng-deu-fra","filename":"34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-29T01:34:22.511+01:00","label":"eng-deu-fra 1080p","size":430,"recording_url":"https://cdn.media.ccc.de/congress/2017/h264-hd/34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_hd.mp4","url":"https://api.media.ccc.de/public/recordings/21375","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"length":3753,"mime_type":"video/mp4","language":"eng-deu-fra","filename":"34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_hd-slides.mp4","state":"new","folder":"slides-h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-29T01:47:06.040+01:00","label":"slides eng-deu-fra 1080p","size":251,"recording_url":"https://cdn.media.ccc.de/congress/2017/slides-h264-hd/34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_hd-slides.mp4","url":"https://api.media.ccc.de/public/recordings/21394","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"length":3738,"mime_type":"audio/opus","language":"eng","filename":"34c3-8782-eng-Intel_ME_Myths_and_reality.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2017-12-29T01:47:49.548+01:00","label":"eng","size":37,"recording_url":"https://cdn.media.ccc.de/congress/2017/opus/34c3-8782-eng-Intel_ME_Myths_and_reality.opus","url":"https://api.media.ccc.de/public/recordings/21396","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"length":3738,"mime_type":"audio/mpeg","language":"eng","filename":"34c3-8782-eng-Intel_ME_Myths_and_reality.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2017-12-29T10:54:08.517+01:00","label":"eng","size":57,"recording_url":"https://cdn.media.ccc.de/congress/2017/mp3/34c3-8782-eng-Intel_ME_Myths_and_reality.mp3","url":"https://api.media.ccc.de/public/recordings/21427","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"length":3753,"mime_type":"video/mp4","language":"eng-deu-fra","filename":"34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2017-12-29T10:54:45.818+01:00","label":"eng-deu-fra 576p","size":238,"recording_url":"https://cdn.media.ccc.de/congress/2017/h264-sd/34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_sd.mp4","url":"https://api.media.ccc.de/public/recordings/21428","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"length":3753,"mime_type":"video/webm","language":"eng-deu-fra","filename":"34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-29T11:15:07.174+01:00","label":"eng-deu-fra 1080p","size":572,"recording_url":"https://cdn.media.ccc.de/congress/2017/webm-hd/34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/21462","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"length":3753,"mime_type":"video/mp4","language":"eng","filename":"34c3-8782-eng-Intel_ME_Myths_and_reality_sd-slides.mp4","state":"new","folder":"slides-h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2018-01-02T15:50:28.655+01:00","label":"slides eng 576p","size":75,"recording_url":"https://cdn.media.ccc.de/congress/2017/slides-h264-sd/34c3-8782-eng-Intel_ME_Myths_and_reality_sd-slides.mp4","url":"https://api.media.ccc.de/public/recordings/22317","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"length":null,"mime_type":"application/pdf","language":"eng","filename":"34c3-8782-intel_me_myths_and_reality.pdf","state":"new","folder":"slides-pdf","high_quality":true,"width":null,"height":null,"updated_at":"2018-01-08T18:54:53.871+01:00","label":"slides eng p","size":3,"recording_url":"https://cdn.media.ccc.de/congress/2017/slides-pdf/34c3-8782-intel_me_myths_and_reality.pdf","url":"https://api.media.ccc.de/public/recordings/22455","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"DRAFT_34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality.en_DRAFT.srt","state":"todo","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2022-01-15T16:22:42.987+01:00","label":"eng (todo)","size":null,"recording_url":"https://cdn.media.ccc.de/congress/2017/DRAFT_34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality.en_DRAFT.srt","url":"https://api.media.ccc.de/public/recordings/48072","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"length":3753,"mime_type":"video/webm","language":"eng-deu-fra","filename":"34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2017-12-29T11:05:50.798+01:00","label":"eng-deu-fra 576p","size":260,"recording_url":"https://cdn.media.ccc.de/congress/2017/webm-sd/34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/21447","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"}]}