Hacker GitHub

← All repos

corna/me_cleaner

View on GitHub ↗ ★ 5,071 Python

Tool for partial deblobbing of Intel ME/TXE firmware images

75 mentions on Hacker News by 55 people: 8 stories, 67 comments · first 2016-11-28 · latest 2024-12-26

Mentions per year 75 mentions · busiest year 2017 (34)
20082026
AllStoriesComments NewestTopOldest
  1. …with the Verified Boot fuses set (i.e. pretty much any recent laptop) to fail to boot[2]. [2] https://github.com/corna/me_cleaner/issues/53#issuecomment-3...
    comment by platinumrad · 2017-10-10 · in Disabling the Intel Management Engine
  2. I think they already did: https://github.com/corna/me_cleaner/wiki/Intel-Boot-Guard
    comment by laurentdc · 2017-10-10 · in Disabling the Intel Management Engine
  3. I found the relevant flags: --soft-disable-only and --soft-disable https://github.com/corna/me_cleaner/commit/d5705b62f802fdf1c...
    comment by sounds · 2017-09-20 · in How to hack a turned-off computer, or running unsigned code in Intel ME
  4. You can do this fairly easily with me_cleaner[1] which also does a lot of other disarming of ME. [1]: https://github.com/corna/me_cleaner
    comment by cyphar · 2017-09-20 · in How to hack a turned-off computer, or running unsigned code in Intel ME
  5. Here's the me_cleaner dev branch which supports setting the HAP bit to disable ME. https://github.com/corna/me_cleaner/tree/dev
    comment by ryanlol · 2017-08-28 · in Disabling Intel ME 11 via undocumented mode
  6. The easiest ways to access them is to rewrite that section of the BIOS directly, such as https://github.com/corna/me_cleaner/wiki/How-does-it-work%3F which literally overwrites them with nops
    comment by Kliment · 2017-07-28 · in Sandsifter: find undocumented instructions and bugs on x86 CPU
  7. …of that signed by AMD. There are 3rd party efforts to produce something similar on Intel platforms: https://github.com/corna/me_cleaner/wiki/How-does-it-work%3F https://puri.sm/posts/reverse-engineering-the-intel-manageme...
    comment by qb45 · 2017-07-20 · in AMD has no plans to release PSP code
  8. >How can the consumer stop someone from exploiting this hack? [Remove Intel ME]( https://github.com/corna/me_cleaner ) to the largest extent possible. I don't know of equivalent tools for AMD, though, which also has similar systems in…
    comment by CapacitorSet · 2017-06-09 · in Malware Uses Obscure Intel CPU Feature to Steal Data and Avoid Firewalls
  9. For those who want to try and disable their ME: https://github.com/corna/me_cleaner
    comment by siegecraft · 2017-06-09 · in Malware Uses Obscure Intel CPU Feature to Steal Data and Avoid Firewalls
  10. …effective solutions for disabling or at least limiting ME (AMT is one application that runs on ME): https://github.com/corna/me_cleaner https://hardenedlinux.github.io/firmware/2016/11/17/neutrali... To be 100% clear, I haven't tried…
    comment by hackuser · 2017-05-03 · in Disabling Intel AMT on Windows
  11. https://github.com/corna/me_cleaner/wiki/How-to-apply-me_cle... The procedure seems far from trivial and requires special hardware(?). Is there a guide or some resources I could follow as a person with no hardware/low-level technical…
    comment by rnhmjoj · 2017-05-01 · in Intel platforms from 2008 onwards have a remotely exploitable security hole
  12. This is also what the management engine cleaner project is for: https://github.com/corna/me_cleaner
    comment by SEJeff · 2017-05-01 · in Intel platforms from 2008 onwards have a remotely exploitable security hole
  13. For those who cannot switch to Libreboot, https://github.com/corna/me_cleaner may be a solution to this issue.
    comment by thrilleratplay · 2017-05-01 · in Intel platforms from 2008 onwards have a remotely exploitable security hole
  14. …folks have found a way to strip it down to the bone without breaking the digital signatures. https://github.com/corna/me_cleaner (This posting is just Librem laptops releasing the me_cleaner for their hardware, a good thing, but not any…
    comment by sounds · 2017-03-10 · in Neutralizing the Intel Management Engine on Librem Laptops
  15. Please check the wiki for more detailed information: https://github.com/corna/me_cleaner/wiki/How-does-it-work%3F...
    comment by mid-kid · 2017-01-17 · in Intel Management Engine cleaner
  16. Not any computer, just these: https://github.com/corna/me_cleaner/wiki/me_cleaner-status
    comment by BuuQu9hu · 2017-01-17 · in Intel Management Engine cleaner
  17. It looks like its wiki sheds some light on the details: https://github.com/corna/me_cleaner/wiki
    comment by d33 · 2017-01-17 · in Intel Management Engine cleaner
  18. ▲ 223
    Intel Management Engine cleaner
    story by BuuQu9hu · 2017-01-17 · 71 comments
  19. ▲ 2
    Script for Partial Deblobbing of the Intel Management Engine Firmware
    story by prajjwal · 2017-01-13 · 0 comments
  20. …can understand is in the wiki [0], but I still don't know what might be contained in the FPTR. [0] https://github.com/corna/me_cleaner/wiki/How-does-it-work%3F
    comment by parent5446 · 2017-01-13 · in It's Now Possible to Disable and Strip Down Intel's ME Blob
  21. ▲ 2
    Tool for partial deblobbing of Intel ME firmware images
    story by dest · 2017-01-12 · 0 comments
  22. ▲ 6
    Intel ME cleaner
    story by necessity · 2017-01-09 · 0 comments
  23. I was thinking of this project - https://github.com/corna/me_cleaner This is the one that strips most of the ME (which seems to be Java applets, if I remember correctly Igor Skochinsky's presentation), but there's still the core "OS" in…
    comment by timonovici · 2016-12-17 · in How to make Linux more trustworthy
  24. Please report it here https://github.com/corna/me_cleaner/issues/3 Thanks
    comment by corna · 2016-11-29 · in Neutralize ME Firmware on SandyBridge and IvyBridge Platforms
  25. …only person who tried this on Skylake seems to have Boot Guard not enabled on his board. More info: https://github.com/corna/me_cleaner/issues/1
    comment by fizzo · 2016-11-28 · in Neutralize ME Firmware on SandyBridge and IvyBridge Platforms