Take a look at our
ThinkPads.com HOME PAGE
For those who might want to contribute to the blog, start here: Editors Alley Topic
Then contact Bill with a Private Message

Dell is charging $20 to let you disable Intel’s flawed Management Engine

Talk about "WhatEVER !"..
Post Reply
Message
Author
Puppy
Senior ThinkPadder
Senior ThinkPadder
Posts: 2485
Joined: Sat Oct 30, 2004 4:52 am
Location: Prague, Czech Republic

Dell is charging $20 to let you disable Intel’s flawed Management Engine

#1 Post by Puppy » Mon Dec 04, 2017 8:44 am

Extortion: Dell is charging $20 to let you disable Intel’s flawed Management Engine
https://mspoweruser.com/extortion-dell- ... nt-engine/

New trend to pay for buggy design?
ThinkPad (1992 - 2012): R51, X31, X220, Tablet 8

dr_st
Senior ThinkPadder
Senior ThinkPadder
Posts: 7195
Joined: Sat Oct 29, 2005 6:20 am

Re: Dell is charging $20 to let you disable Intel’s flawed Management Engine

#2 Post by dr_st » Mon Dec 04, 2017 9:12 am

They have to provide a custom SPI image for this. Essentially it's no different than any other customization option.
Current: Thinkpad 25 (20K7), Yoga 14 (20FY), X220 4291-4BG, T410 2537-R46, T60 2007-QPG, T42 2373-F7G
Collectibles: T430s (IPS FHD + Classic Keyboard), X32 (IPS Screen)
Retired: X61 7673-V2V, T60 1952-F76, A31p w/ Ultrabay Numpad

Puppy
Senior ThinkPadder
Senior ThinkPadder
Posts: 2485
Joined: Sat Oct 30, 2004 4:52 am
Location: Prague, Czech Republic

Re: Dell is charging $20 to let you disable Intel’s flawed Management Engine

#3 Post by Puppy » Mon Dec 04, 2017 7:47 pm

It wouldn't be required if it weren't that buggy. So it is up to Intel to resolve the mess.
ThinkPad (1992 - 2012): R51, X31, X220, Tablet 8

dr_st
Senior ThinkPadder
Senior ThinkPadder
Posts: 7195
Joined: Sat Oct 29, 2005 6:20 am

Re: Dell is charging $20 to let you disable Intel’s flawed Management Engine

#4 Post by dr_st » Tue Dec 05, 2017 1:01 am

It's not required even now. The "serious" bugs have little practical implication, for someone not actually using AMT.

Every piece of software/firmware ever written is buggy. Intel AMT is a rather complicated one as well. And Intel always works actively to fix AMT/ME bugs as they are discovered.
Current: Thinkpad 25 (20K7), Yoga 14 (20FY), X220 4291-4BG, T410 2537-R46, T60 2007-QPG, T42 2373-F7G
Collectibles: T430s (IPS FHD + Classic Keyboard), X32 (IPS Screen)
Retired: X61 7673-V2V, T60 1952-F76, A31p w/ Ultrabay Numpad

Puppy
Senior ThinkPadder
Senior ThinkPadder
Posts: 2485
Joined: Sat Oct 30, 2004 4:52 am
Location: Prague, Czech Republic

Re: Dell is charging $20 to let you disable Intel’s flawed Management Engine

#5 Post by Puppy » Tue Dec 05, 2017 10:00 am

dr_st wrote:
Tue Dec 05, 2017 1:01 am
Every piece of software/firmware ever written is buggy. Intel AMT is a rather complicated one as well. And Intel always works actively to fix AMT/ME bugs as they are discovered.
It took them 7 years to fix well-known bug latety. Yes, it is complicated, that's why it makes sense to offer an option to completely disabled it (for free).

Even Microsoft has learnt. Many years ago the Windows NT server had enabled all features by default, to make it secure you had to know all of them and disable the unwanted ones. Now they finally realized the opposite option, disable everything by default and let administrators enable selected ones only, is the right way.
ThinkPad (1992 - 2012): R51, X31, X220, Tablet 8

Puppy
Senior ThinkPadder
Senior ThinkPadder
Posts: 2485
Joined: Sat Oct 30, 2004 4:52 am
Location: Prague, Czech Republic

Re: Dell is charging $20 to let you disable Intel’s flawed Management Engine

#6 Post by Puppy » Thu Dec 14, 2017 4:41 pm

Intel to slap hardware lock on Management Engine code to thwart downgrade attacks
https://www.theregister.co.uk/2017/12/1 ... ased_lock/

From version 12 onward, ME-equipped chips will defend against patch rollbacks

AMD to the rescue?
ThinkPad (1992 - 2012): R51, X31, X220, Tablet 8

TPFanatic
Senior Member
Senior Member
Posts: 881
Joined: Thu Jul 30, 2015 11:29 pm
Location: Boston, Massachusetts

Re: Dell is charging $20 to let you disable Intel’s flawed Management Engine

#7 Post by TPFanatic » Thu Dec 14, 2017 10:04 pm

Messing with ME / AMT on Nehalem/Arrandale Thinkpads carries the risk of semi-bricking the laptop, it happened to my X201. Many threads on Lenovo forums about X201, X201 Tablet, T410, T410s, and L412 getting [censored] by corruption of Intel ME.
lenovo T430 i5 3320m, HD+, 8GB
lenovo T500 P9700, WUXGA, 8GB
lenovo T520 i7 2760QM, FHD, 6GB


Enable advanced features on older Synaptics touchpads with the registry: http://forum.thinkpads.com/viewtopic.php?f=2&t=122612

Puppy
Senior ThinkPadder
Senior ThinkPadder
Posts: 2485
Joined: Sat Oct 30, 2004 4:52 am
Location: Prague, Czech Republic

Re: Dell is charging $20 to let you disable Intel’s flawed Management Engine

#8 Post by Puppy » Sat Jan 06, 2018 6:08 am

Intel has a tool to detect flaws in ME/AMT
https://downloadcenter.intel.com/download/27150
ThinkPad (1992 - 2012): R51, X31, X220, Tablet 8

Puppy
Senior ThinkPadder
Senior ThinkPadder
Posts: 2485
Joined: Sat Oct 30, 2004 4:52 am
Location: Prague, Czech Republic

Re: Dell is charging $20 to let you disable Intel’s flawed Management Engine

#9 Post by Puppy » Sun Jan 14, 2018 10:28 am

Gone in 30 seconds: New Intel AMT exploit is scarier than you can ever fathom
https://www.notebookcheck.net/Gone-in-3 ... 216.0.html

TL;DR Change your default AMT password you probably don't know about at all.
ThinkPad (1992 - 2012): R51, X31, X220, Tablet 8

dr_st
Senior ThinkPadder
Senior ThinkPadder
Posts: 7195
Joined: Sat Oct 29, 2005 6:20 am

Re: Dell is charging $20 to let you disable Intel’s flawed Management Engine

#10 Post by dr_st » Sun Jan 14, 2018 12:37 pm

Puppy wrote:
Sun Jan 14, 2018 10:28 am
TL;DR Change your default AMT password you probably don't know about at all.
Yep, and also make sure there is a BIOS password (because the AMT settings including password can be reset through the BIOS), and also make sure the computer is not left unsupervised and unlocked, and that the hard drive is encrypted. Because an attacker with physical access (which is what the article is talking about) can, you know, steal it.
Current: Thinkpad 25 (20K7), Yoga 14 (20FY), X220 4291-4BG, T410 2537-R46, T60 2007-QPG, T42 2373-F7G
Collectibles: T430s (IPS FHD + Classic Keyboard), X32 (IPS Screen)
Retired: X61 7673-V2V, T60 1952-F76, A31p w/ Ultrabay Numpad

Post Reply
  • Similar Topics
    Replies
    Views
    Last post

Return to “Off-Topic Stuff”

Who is online

Users browsing this forum: No registered users and 4 guests