Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Set the HAP bit (ME >= 11) or the AltMeDisable bit (ME < 11)
Positive Technologies discovered the presence of an undocumented HAP bit in the PCHSTRP0 field of the descriptor which, when set to 1, disables completely Intel ME just after the initialization. This is confirmed both by an analysis of the status of Intel ME after the setting of the bit and by reverse engineering the BUP module. More information in their blog post: http://blog.ptsecurity.com/2017/08/disabling-intel-me.html Moreover Igor Skochinsky discovered a bit in the PCHSTRP10, which achieves more or less the same result as the HAP bit for ME < 11. With this commit one of these bits is set to 1: instead of halting due to corrupted modules, Intel ME now halts before trying to load them, possibly leading to a cleaner shutoff of the ME subsystem.
- Loading branch information
ced3b46
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I just can't stop smiling. I can't. I can't.
ced3b46
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Stop smiling. The world is a horrendous place. We must frown at our achievements. This will remind us that the past wasn't really that much worse in the first place.
ced3b46
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@archfan Or just dont stop smiling, as the world is a horrendous place, loaded with a level of irony that is hilarious again.