{"guid":"581ccbad-4bbf-47a2-8845-f52278d61061","title":"Intel ME: Myths and reality","subtitle":null,"slug":"34c3-8782-intel_me_myths_and_reality","link":"https://fahrplan.events.ccc.de/congress/2017/Fahrplan/events/8782.html","description":"Many claims were made recently about purpose and capabilities of the Intel ME but with all the buzz it is not always clear what are facts and what is just speculation. We'll try to clear the fog of misunderstanding with research based on investigations of ME firmware and practical experiments on ME-equipped hardware.\n\nWe would like to cover the most common claims about the ME, based in part on the new research done in the few last years such as complete recovery of the proprietary Huffman compression which previously hindered research into some parts of the ME firmware, as well as describe what steps can ordinary users take to reduce the attack surface exposed by the ME.\n\nSome of the claims we plan to  cover:\n\n• It's a  backdoor made for NSA and serves no useful purpose\n• It is always on even if the PC is turned off\n• It can read all data on PC/spy on the user\n• It can't be disabled\n• It can lock the PC with a command sent over the air\n• It a black box which can't be audited because it's closed source\n• End users can't do anything about it. \n\nTogether with the talk we're planning to make available detailed notes on reverse engineering of the ME firmware with some pointers to the identified functionality for other interested researchers.\n","original_language":"eng","persons":["Igor Skochinsky","Nicola Corna"],"tags":["34c3","8782","Security"],"view_count":9661,"promoted":false,"date":"2017-12-28T00:00:00.000+01:00","release_date":"2017-12-29T01:00:00.000+01:00","updated_at":"2026-04-18T19:15:03.266+02:00","length":3753,"duration":3753,"thumb_url":"https://static.media.ccc.de/media/congress/2017/8782-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2017/8782-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2017/581ccbad-4bbf-47a2-8845-f52278d61061-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2017/581ccbad-4bbf-47a2-8845-f52278d61061-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/34c3-8782-intel_me_myths_and_reality","url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_title":"34C3: TUWAT","conference_url":"https://api.media.ccc.de/public/conferences/34c3","related":[{"event_id":4763,"event_guid":"2ef3b60f-6e5c-4c23-a145-d263685ec13e","weight":111},{"event_id":4766,"event_guid":"19b7e5d7-bba7-46da-afbc-f16d43fe395f","weight":138},{"event_id":4767,"event_guid":"f2ca3661-30c8-476e-9d6b-920bb20b21eb","weight":82},{"event_id":4784,"event_guid":"65a25dfd-56dd-4e87-a910-334e2dc25a9c","weight":493},{"event_id":4794,"event_guid":"a2887b4a-0c9d-4220-a52f-c65c20ae25d7","weight":111},{"event_id":4795,"event_guid":"722ce759-9cde-4e3b-8db5-5a97aa9673d9","weight":91},{"event_id":4796,"event_guid":"ff24373e-ebe2-4077-9db0-eae5ab003538","weight":98},{"event_id":4800,"event_guid":"a9ebf7e3-abc5-49d9-8efe-316b3bc52902","weight":50},{"event_id":4804,"event_guid":"0cccbcdd-1e5c-4457-883b-6141c04d754c","weight":87},{"event_id":4817,"event_guid":"be19fbe3-e825-4e67-93f9-a6aeda2e31af","weight":87},{"event_id":4821,"event_guid":"aed02b65-9a16-4a42-ac28-2883da680d0a","weight":75},{"event_id":4823,"event_guid":"bf924a39-2860-4e27-8741-b8fa0c010363","weight":100},{"event_id":4826,"event_guid":"16645200-2036-4a3c-a44d-a5ff44ac2991","weight":207},{"event_id":4832,"event_guid":"275f85de-d612-4440-8755-85dee5912f12","weight":133},{"event_id":4833,"event_guid":"e1a60f7b-6a56-4dce-ab3a-c686fa940aa8","weight":222},{"event_id":4837,"event_guid":"664f6c37-2fab-4191-a5d6-042aba7518c3","weight":80},{"event_id":4843,"event_guid":"86c60da2-fefc-4750-ad22-fa821ce619b1","weight":82},{"event_id":4844,"event_guid":"5c5e888e-4556-405b-a205-e59b97db99e1","weight":104},{"event_id":4845,"event_guid":"c21cb389-aba3-4eaa-ba1f-76f966b1686e","weight":78},{"event_id":4846,"event_guid":"832b8fb8-beb1-4d92-93d0-ba3b7568905a","weight":83},{"event_id":4850,"event_guid":"949bee69-3be0-4cc8-915b-5f1167141dcc","weight":74},{"event_id":4852,"event_guid":"77aaf0be-d2a8-4531-be02-c91c19b1ca77","weight":75},{"event_id":4855,"event_guid":"51b586be-500c-436e-b70c-fc433e65c4be","weight":99},{"event_id":4856,"event_guid":"c5bfac96-8290-438a-a47a-ebdbf0ab5365","weight":85},{"event_id":4866,"event_guid":"117a52b4-f675-49dd-aafe-659c07b6bc9c","weight":130},{"event_id":4909,"event_guid":"03ba9edb-1d3a-4774-9384-7548c0696df7","weight":84},{"event_id":4929,"event_guid":"8e222759-cd6b-403b-8fe1-3517bf7d2802","weight":127}],"recordings":[{"size":null,"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"DRAFT_34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality.en_DRAFT.srt","state":"todo","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2022-01-15T16:22:42.987+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/DRAFT_34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality.en_DRAFT.srt","url":"https://api.media.ccc.de/public/recordings/48072","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":234,"length":3753,"mime_type":"video/mp4","language":"eng","filename":"34c3-8782-eng-Intel_ME_Myths_and_reality.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-29T01:33:44.186+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/h264-hd/34c3-8782-eng-Intel_ME_Myths_and_reality.mp4","url":"https://api.media.ccc.de/public/recordings/21372","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":235,"length":3753,"mime_type":"video/mp4","language":"deu","filename":"34c3-8782-deu-Intel_ME_Myths_and_reality.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-29T01:33:58.716+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/h264-hd/34c3-8782-deu-Intel_ME_Myths_and_reality.mp4","url":"https://api.media.ccc.de/public/recordings/21373","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":236,"length":3753,"mime_type":"video/mp4","language":"fra","filename":"34c3-8782-fra-Intel_ME_Myths_and_reality.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-29T01:34:08.274+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/h264-hd/34c3-8782-fra-Intel_ME_Myths_and_reality.mp4","url":"https://api.media.ccc.de/public/recordings/21374","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":445,"length":3753,"mime_type":"video/mp4","language":"eng-deu-fra","filename":"34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-29T01:34:22.511+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/h264-hd/34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_hd.mp4","url":"https://api.media.ccc.de/public/recordings/21375","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":271,"length":3753,"mime_type":"video/mp4","language":"eng-deu-fra","filename":"34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_hd-slides.mp4","state":"new","folder":"slides-h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-29T01:47:06.040+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/slides-h264-hd/34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_hd-slides.mp4","url":"https://api.media.ccc.de/public/recordings/21394","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":37,"length":3738,"mime_type":"audio/opus","language":"eng","filename":"34c3-8782-eng-Intel_ME_Myths_and_reality.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2017-12-29T01:47:49.548+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/opus/34c3-8782-eng-Intel_ME_Myths_and_reality.opus","url":"https://api.media.ccc.de/public/recordings/21396","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":57,"length":3738,"mime_type":"audio/mpeg","language":"eng","filename":"34c3-8782-eng-Intel_ME_Myths_and_reality.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2017-12-29T10:54:08.517+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/mp3/34c3-8782-eng-Intel_ME_Myths_and_reality.mp3","url":"https://api.media.ccc.de/public/recordings/21427","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":246,"length":3753,"mime_type":"video/mp4","language":"eng-deu-fra","filename":"34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2017-12-29T10:54:45.818+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/h264-sd/34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_sd.mp4","url":"https://api.media.ccc.de/public/recordings/21428","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":374,"length":3753,"mime_type":"video/webm","language":"eng-deu-fra","filename":"34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2017-12-29T11:05:50.798+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/webm-sd/34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/21447","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":568,"length":3753,"mime_type":"video/webm","language":"eng-deu-fra","filename":"34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-12-29T11:15:07.174+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/webm-hd/34c3-8782-eng-deu-fra-Intel_ME_Myths_and_reality_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/21462","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":76,"length":3753,"mime_type":"video/mp4","language":"eng","filename":"34c3-8782-eng-Intel_ME_Myths_and_reality_sd-slides.mp4","state":"new","folder":"slides-h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2018-01-02T15:50:28.655+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/slides-h264-sd/34c3-8782-eng-Intel_ME_Myths_and_reality_sd-slides.mp4","url":"https://api.media.ccc.de/public/recordings/22317","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"},{"size":2,"length":null,"mime_type":"application/pdf","language":"eng","filename":"34c3-8782-intel_me_myths_and_reality.pdf","state":"new","folder":"slides-pdf","high_quality":true,"width":null,"height":null,"updated_at":"2018-01-08T18:54:53.871+01:00","recording_url":"https://cdn.media.ccc.de/congress/2017/slides-pdf/34c3-8782-intel_me_myths_and_reality.pdf","url":"https://api.media.ccc.de/public/recordings/22455","event_url":"https://api.media.ccc.de/public/events/581ccbad-4bbf-47a2-8845-f52278d61061","conference_url":"https://api.media.ccc.de/public/conferences/34c3"}]}