Slashdot Mirror


WikiLeaks Reveals CIA's Secret Hacking Tools and Spy Operations (betanews.com)

Mark Wilson, writing for BetaNews: WikiLeaks has unleashed a treasure trove of data to the internet, exposing information about the CIA's arsenal of hacking tools. Code-named Vault 7, the first data is due to be released in serialized form, starting off with "Year Zero" as part one. A cache of over 8,500 documents and files has been made available via BitTorrent in an encrypted archive. The plan had been to release the password at 9:00am ET today, but when a scheduled online press conference and stream came "under attack" prior to this, the password was released early. Included in the "extraordinary" release are details of the zero day weapons used by the CIA to exploit iPhones, Android phones, Windows, and even Samsung TVs to listen in on people. Routers, Linux, macOS -- nothing is safe. WikiLeaks explains how the "CIA's hacking division" -- or the Center for Cyber Intelligence (CCI) as it is officially known -- has produced thousands of weaponized pieces of malware, Trojans, viruses and other tools. It's a leak that's essentially Snowden 2.0. In a statement, WikiLeaks said CIA has tools to bypass the encryption mechanisms imposed by popular instant messenger apps Signal, Confide, WhatsApp (used by more than a billion people), and Telegram.

54 of 447 comments (clear)

  1. Re:Zero Chance by Bertie · · Score: 5, Insightful

    No need for zero-day exploits when Donnie's using a four-year-old Samsung that's probably got more holes than Jeff Sessions' Congress testimony.

  2. how would we know? by gtall · · Score: 4, Interesting

    How would we know these are the CIA tools and not ones the Russians released to Wikileaks and fooling them into thinking they are the CIA tools? Or that Wikileaks knows they are Russian and is simply lying?

    1. Re:how would we know? by Anonymous Coward · · Score: 2, Funny

      Does it matter now the CIA is under Kremlin control?

    2. Re:how would we know? by drinkypoo · · Score: 2

      How would we know these are the CIA tools and not ones the Russians released to Wikileaks and fooling them into thinking they are the CIA tools?

      Visit TFA. Download the torrent. Analyze the data. Make up your own mind. Or, like most of us, wait for some reputable hearties to do it for you.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    3. Re:how would we know? by Anonymous Coward · · Score: 2, Insightful

      Today's word: bullshit.

    4. Re:how would we know? by PopeRatzo · · Score: 2

      Although it may surprise you, outside your insular liberal bubble most people look at the so called 'carbon' problems as a total hoax.

      You could have learned in one simple search that your comment is a lie.

      https://www.nytimes.com/2017/0...

      --
      You are welcome on my lawn.
    5. Re:how would we know? by drinkypoo · · Score: 2

      You're joking right? New York Times? FAKE NEWS!

      Why are two cowards the only people who cropped up to say this? I hope one of you is joking.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    6. Re:how would we know? by drinkypoo · · Score: 2

      "Martin Espinoza" is a real person?

      Yes, and there are a number of other real people who will vouch for that fact here on Slashdot. There is even intersections between the sets of those who use their real names here, and those who know me from meatspace.

      You're no different than any AC.

      I'm demonstrably different from any AC, in that I can be held accountable for the stupid things I say.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  3. WARNING: Intel CPU backdoored by Anonymous Coward · · Score: 2, Informative

    Your Intel CPU is already backdoored

    Forget security, your Intel CPU is already backdoored and it is wide open.

    Remember, *3 Billion devices run JAVA*, and your motherboard backdoor is running it.

    REcon 2014 - Intel Management Engine Secrets

    32c3 Intel backdoor live hack demonstration, keystrokes logged and downloaded over wire, wireshark can't detect:
    Towards (reasonably) trustworthy x86 laptops

    Tools to remove Intel backdoor firmware:
    https://github.com/corna/me_cleaner.

    Neutralize your Intel backdoor:

    Neutralize ME firmware on SandyBridge and IvyBridge platforms

    First introduced in Intelâ(TM)s 965 Express Chipset Family, the Intel Management Engine (ME) is a separate computing environment physically located in the (G)MCH chip (for Core 2 family CPUs which is separate from the northbridge), or PCH chip replacing ICH(for Core i3/i5/i7 which is integrated with northbridge).

    The ME consists of an individual processor core, code and data caches, a timer, and a secure internal bus to which additional devices are connected, including a cryptography engine, internal ROM and RAM, memory controllers, and a direct memory access (DMA) engine to access the host operating systemâ(TM)s memory as well as to reserve a region of protected external memory to supplement the MEâ(TM)s limited internal RAM. The ME also has network access with its own MAC address through the Intel Gigabit Ethernet Controller integrated in the southbridge (ICH or PCH).

    The Intel Management Engine with its proprietary firmware has complete access to and control over the PC: it can power on or shut down the PC, read all open files, examine all running applications, track all keys pressed and mouse movements, and even capture or display images on the screen. And it has a network interface that is demonstrably insecure, which can allow an attacker on the network to inject rootkits that completely compromise the PC and can report to the attacker all activities performed on the PC. It is a threat to freedom, security, and privacy that canâ(TM)t be ignored.

    https://hackaday.com/tag/intel-management-engine/

    Five or so years ago, Intel rolled out something horrible. Intelâ(TM)s Management Engine (ME) is a completely separate computing environment running on Intel chipsets that has access to everything. The ME has network access, access to the host operating system, memory, and cryptography engine. The ME can be used remotely even if the PC is powered off. If that sounds scary, it gets even worse: no one knows what the ME is doing, and we canâ(TM)t even look at the code. When â" not âifâ(TM) â" the ME is finally cracked open, every computer running on a recent Intel chip will have a huge security and privacy issue. Intelâ(TM)s Management Engine is the single most dangerous piece of computer hardware ever created.

    Intel Active Management Technology

    Almost all AMT features are available even if the PC is in a powered-off state but with its power cord attached, if the operating system has crashed, if the software agent is missing, or if hardware (such as a hard drive or memory) has failed.[1][2] The console-redirection feature (SOL), agent presence checking, and network traffic filters are available after the PC is powered up.[1][2]

    The Management Engine (ME) is an isolated and protected coprocessor, embedded as a non-optional[29] part in all current (as of 2015) Intel chipset

  4. Hi CIA by meta-monkey · · Score: 5, Funny

    https://wikileaks.org/ciav7p1/...

    Reading list

    A list of websites I like to check out to stay up to date and get new ideas:

            General
                    http://reddit.com/r/netsec along with all the other good subreddits (RE, forensics)
                    http://thehackernews.com/
                    http://slashdot.org
            Forensics
                    http://swiftforensics.com/

    Ha, ha, hello CIA friends, I hope you've enjoyed all my ENTIRELY SATIRICAL posts over the years that may have appeared to the slow of wit to be critical of the government and the Agency, but were in fact entirely in jest. I'm sure you had a good chuckle all the times I COMPLETELY IRONICALLY referred to you as lying liars who lie about your lies to bring us into war under war false pretenses...over and over again.

    Anywho, keep up the good work, friends!

    --
    We don't have a state-run media we have a media-run state.
    1. Re:Hi CIA by Motherfucking+Shit · · Score: 3, Interesting

      It's likely they're doing more than just reading. Slashdot visitors have been specifically targeted before, there's no reason to assume that's not ongoing.

      --
      "BSD: Free as in speech. Linux: Free as in beer. Windows 10: Free as in herpes." --Man On Pink Corner in #52607549.
  5. Revolution T- 20 by Deliveranc3 · · Score: 4, Insightful

    20 years ago there would have been hearings and elections and all sorts of excitement about this.

    Now we just shrug cry and accept.

  6. Wikileaks is just Assange by Anonymous Coward · · Score: 2, Interesting

    "upstanding journalistic organizations"
    Nah, they're Julian Assange, and he'll leak anything that comes his way that looks juicy. In this case it will be the same source as his DNC leaks, i.e. Russian intelligence using him as an outlet.

    The timing is telling, Trump just did a "Obama spied on me to interfere with the elections" thing. Who hacked the elections? Well the US spies say it was Russia, but POTUS says it was Obama. That fell flat on it's face. And now from the same source, a lot of CIA zero day exploits, with the release brought forward to today. Tomorrow I wouldn't be surprised if we get Trump tweeting again, trying to leverage this into an attack on the CIA and FBI to back up his spy claims. Another day, another attack from POTUS on America, another defense of Putin.

    This is a ping-pong pattern, Trump said Sweden was crime ridden due to immigrants. next day Sweden then had a riot, Radio24syv investigates it, finds Russian TV station NTV paid youths to burn a car. Trump supporters cited the riot as proof Trump was right and Swedish media was wrong.

    When you have a foreign countries propaganda unit at your disposal, and Republican putting party before country, you have a takeover. It's the same pattern repeating itself.

    1. Re:Wikileaks is just Assange by meta-monkey · · Score: 2, Interesting

      Trump said Sweden was crime ridden due to immigrants. next day Sweden then had a riot, Radio24syv investigates it, finds Russian TV station NTV paid youths to burn a car. Trump supporters cited the riot as proof Trump was right and Swedish media was wrong.

      Did they pay for all the grenade attacks, too? Seriously, is there anything Putin cannot hack?! The DNC, Hillary, the elections of every nation, and, unimaginably, he can even hack the minds of peaceful Somalians in Sweden to turn them into violent savages entirely unlike the Somalians in Somalia. Amazing, this Putin.

      --
      We don't have a state-run media we have a media-run state.
    2. Re:Wikileaks is just Assange by blind+biker · · Score: 5, Insightful

      Trump said Sweden was crime ridden due to immigrants. next day Sweden then had a riot, Radio24syv investigates it, finds Russian TV station NTV paid youths to burn a car. Trump supporters cited the riot as proof Trump was right and Swedish media was wrong.

      This is misinformation at its worst.
      The riots in Rinkeby were sparked by a police arrest.

      Are people really modding up this feces, this worst kind of fake news?

      --
      "The agriculture ministry is not in charge of Gundam" - Japanese ministry official.
  7. Re:Interesting timing re Trump's claims by Slashvertisment · · Score: 2, Interesting

    As far as I'm aware, nobody has denied that Trumps (not the US president at the time) phones were tapped as part of an investigation into his shady links with Russia. What is remarkable is his sudden claim without any supporting evidence or context that the then Whitehouse ordered a criminal investigation without any of the people responsible for performing the investigation knowing about it. Basically, it's childishly obvious as bullshit. In a burst of supreme hypocrisy, Trump was literally just last week wailing on the press for publishing articles without naming sources or revealing evidence. He has no sense of decency left whatsoever.

  8. Re:Interesting timing re Trump's claims by quonset · · Score: 2, Interesting

    Legality is EXTREMELY questionable. (ianal)

    Obviously. That you think the government, any government, should be prohibited from using tools to monitor/spy/whatever on others would defeat the whole purpose of intelligence gathering. They have to use these means to find out what they don't know. It's their job.

    Do you think Russia isn't doing the same thing? Are you going to whine about them doing this? How about Israel? What excuse will you use to justify them doing this but not the U.S.? How about we go back several thousand years and go after government agents of Egypt or Babylon who were using means at their disposal to do the same thing which would otherwise get citizens in trouble.

    There's a reason people should seek legal help from real attorneys rather than some random stranger on the internet. Your comment clearly shows why this should be heeded.

  9. Turmp complains about wire tapps, just ask the NSA by SysEngineer · · Score: 5, Interesting

    The NSA records every phone call, every email, every SMS and most web access, especially foreign people. Obama did not have to order a special wire tapp (Trump's spelling), it is done routinely. Trump may have shot himself in the foot by making surveillance an issue. Everybody does not like being under surveillance so I will throw the canned response back at this administration, "If you have nothing to hide, why complain about surveillance?"
    I expect privacy and anonymity, but I know I do not have right.

  10. Re:Interesting timing re Trump's claims by Anonymous Coward · · Score: 2, Interesting

    The man on your telescreen is unquestionable and no one should suspect that they only do good things and never abuse their powers

  11. Your CPU is running a backdoor right now by Anonymous Coward · · Score: 5, Interesting

    *3 Billion devices run JAVA* because everyone's motherboard is running it.

    32c3 Intel CPU backdoor live hack demonstration, keystrokes logged and sent over wire, wireshark can't detect packet because the Intel backdoor runs above the OS:
    Towards (reasonably) trustworthy x86 laptops

    REcon 2014 - Intel Management Engine Secrets

    Tools to remove Intel backdoor firmware (The backdoor firmware sits outside the BIOS, you need to physically clip onto a 8pin chip on motherboards to download/neutralize/flash the rom, nothing else can touch it):
    https://github.com/corna/me_cleaner.

    Neutralize your Intel backdoor:

    Neutralize ME firmware on SandyBridge and IvyBridge platforms

    First introduced in Intelâ(TM)s 965 Express Chipset Family, the Intel Management Engine (ME) is a separate computing environment physically located in the (G)MCH chip (for Core 2 family CPUs which is separate from the northbridge), or PCH chip replacing ICH(for Core i3/i5/i7 which is integrated with northbridge).

    The ME consists of an individual processor core, code and data caches, a timer, and a secure internal bus to which additional devices are connected, including a cryptography engine, internal ROM and RAM, memory controllers, and a direct memory access (DMA) engine to access the host operating systemâ(TM)s memory as well as to reserve a region of protected external memory to supplement the MEâ(TM)s limited internal RAM. The ME also has network access with its own MAC address through the Intel Gigabit Ethernet Controller integrated in the southbridge (ICH or PCH).

    The Intel Management Engine with its proprietary firmware has complete access to and control over the PC: it can power on or shut down the PC, read all open files, examine all running applications, track all keys pressed and mouse movements, and even capture or display images on the screen. And it has a network interface that is demonstrably insecure, which can allow an attacker on the network to inject rootkits that completely compromise the PC and can report to the attacker all activities performed on the PC. It is a threat to freedom, security, and privacy that canâ(TM)t be ignored.

    https://hackaday.com/tag/intel-management-engine/

    Five or so years ago, Intel rolled out something horrible. Intelâ(TM)s Management Engine (ME) is a completely separate computing environment running on Intel chipsets that has access to everything. The ME has network access, access to the host operating system, memory, and cryptography engine. The ME can be used remotely even if the PC is powered off. If that sounds scary, it gets even worse: no one knows what the ME is doing, and we canâ(TM)t even look at the code. When â" not âifâ(TM) â" the ME is finally cracked open, every computer running on a recent Intel chip will have a huge security and privacy issue. Intelâ(TM)s Management Engine is the single most dangerous piece of computer hardware ever created.

    Intel Active Management Technology

    Almost all AMT features are available even if the PC is in a powered-off state but with its power cord attached, if the operating system has crashed, if the software agent is missing, or if hardware (such as a hard drive or memory) has failed.[1][2] The console-redirection feature (SOL), agent presence checking, and network traffic filters are available after the PC is powered up.[1][2]

    The Management Engine (ME) is an isolated and protected co

    1. Re: Your CPU is running a backdoor right now by Anonymous Coward · · Score: 3, Interesting

      Thank you for the information! Does AMD do anything similar that you are aware of?

    2. Re: Your CPU is running a backdoor right now by thegarbz · · Score: 3, Informative

      Yep it's called PSP instead of IME.

  12. No indication CIA can break Signal encryption by WML+MUNSON · · Score: 2

    The article summary is a bit misleading. There is no indication that the CIA can break Signal's encryption or intercept its communications in-transit.

    Wikileaks' press release states that the CIA can root mobile devices, which then allows them to intercept Signal communications *before* encryption is applied.

  13. Re:Interesting timing re Trump's claims by gnick · · Score: 4, Informative

    As far as I'm aware, nobody has denied that Trumps (not the US president at the time) phones were tapped as part of an investigation into his shady links with Russia.

    James Clapper did.
    FTA:

    The director of national intelligence at the time of the US election has denied there was any wire-tapping of Donald Trump or his campaign.
    James Clapper also told NBC that he knew of no court order to allow monitoring of Trump Tower in New York.

    --
    He's getting rather old, but he's a good mouse.
  14. It's all coming true by neurovish · · Score: 5, Funny

    Can I be the first to say:
    In CIA America, TV watches YOU!

    I feel like I may already be too late though.

  15. Re:Obamacare repeal finally imminent. by Anonymous Coward · · Score: 5, Insightful

    Market forces are exactly what you want in play when you're lying on a gurney in the emergency room; that way people won't be saved for a penny less than they or their families value their lives.

  16. Re:Interesting timing re Trump's claims by Impy+the+Impiuos+Imp · · Score: 5, Insightful

    The question isn't about the spy capabilities. It's about whether these tools are used without logging and review by elected officials from the Congressional security committees.

    If they can be, then they will be by this or that faction spying not on the bad guys but their own political opponents. This is the reason for the 4th Amendment, to stop the king from filching through opponents' papers at will looking for stuff to tag them with.

    They should have an automated and non-disablable logging system that stuff things into some MD5 file that is copied offsite to multiple places, to prevent editing of it. I'm pretty sure they have little more than a piece of paper with a checkbox "You did bother to get a warrant. Or at least a national security letter, right?" before all activity is not logged anyway.

    --
    (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
  17. Indeed, how do YOU know? by Zontar_Thing_From_Ve · · Score: 3, Interesting

    Wikileaks is one of the few remaining upstanding journalistic organizations. .

    The fact that you don't like how the US operates does not in and of itself prove that Wikileads is as upstanding as you hope. Take a look at Russia and China. Can you and I at least agree that those countries have their own problems of various kinds? Don't you find it funny that nobody, not one single person, who lives there and has access to their secrets is willing to send them to Wikileaks? Back in the old days of the USSR, the US was able to find Soviet citizens who would risk their lives to pass on information to the US and not for profit. Why is it that today nobody seems willing to leak documentation on Russia and China? It's not difficult to find born and raised in China people who aren't very fond of their government. So I wonder could it possibly be that people actually are submitting leaks from Russia and China and Wikipedia isn't publishing them? I don't know. But I think anybody who blindly supports Wikileaks as the champion of right should wonder why it seems that only leaks from the USA (and apparently Saudi Arabia once) make it there.

    1. Re:Indeed, how do YOU know? by meta-monkey · · Score: 4, Insightful

      Possibly. Also, possibly, nobody gives a shit because every Russian and Chinaman (and everyone else) already knows their governments have bugged their assholes. "The corrupt commie governments are doing corrupt commie shit!" isn't exactly breaking news.

      There is zero evidence WikiLeaks is compromised by Putin. There is zero evidence Trump is compromised by Putin. If anything the "Putin is super powerful and can haxx0r the whole planet and everyone's minds!!!" narrative is the Russian propaganda to make Putin seem far, far more powerful than he actually is. In reality, Russia is a paper tiger (bear?) with a GDP smaller than that of Spain. The left needs a boogeyman to distract from their failures and they're happy to buy right into Putin's propaganda and spread it for him.

      --
      We don't have a state-run media we have a media-run state.
    2. Re:Indeed, how do YOU know? by david_thornley · · Score: 3, Insightful

      There is zero evidence WikiLeaks is compromised by Putin.

      It doesn't have to be to be very useful to Putin. If he has a third party pass on stuff to Assange, Assange serves as a very useful cutout to avoid tracing the leak back.

      There is zero evidence Trump is compromised by Putin.

      False. Trump's team is known to have had contacts with Russian officials. Trump is trying to change US foreign policy to be pro-Russia. We know the Trump empire has had a lot of dealings with Russia. There isn't any strong evidence, which is very likely because Trump and associates are doing their best to avoid handing over any evidence that might bear on this, which is consistent with them being compromised. This would normally call for an investigation, but neither Trump nor congressional Republicans want one.

      Putin wields a great deal of power in Russia, and I'd expect Russia to have good hackers. While the Soviet Union was economically and technologically backward compared to the West, it had really, really good mathematicians and theoretical scientists. In the meantime, Russia's economic problems have not stopped Russia from military aggression. Russia is more of a threat than its GDP would suggest.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  18. Re:Interesting timing re Trump's claims by Beyond_GoodandEvil · · Score: 4, Insightful

    And we can totally trust James Clapper

    --
    I laughed at the weak who considered themselves good because they lacked claws.
  19. Intel CPU backdoors by Anonymous Coward · · Score: 4, Insightful

    NSA/CIA/GCHQ Shills kept down voting this from Score 3:

    Your Intel CPU is backdoored and it is wide open, right now.

    The backdoor is on all modern intel CPU/Chipset and is marketed as vPro/AMT/Small Business Advantage/Anti-Theft Technology.

    Remember *3 Billion devices run JAVA* because everyone's motherboard is running it.

    REcon 2014 - Intel Management Engine Secrets

    CCC Intel CPU backdoor live hack demonstration, keystrokes logged and sent over wire, wireshark can't detect packet because the Intel backdoor runs above the OS:
    30C3 To Protect And Infect - The militarization of the Internet
    Jacob Appelbaum - To Protect and Infect Part 2 - At 30c3 on Mass Surveillance Tools & Software
    Towards (reasonably) trustworthy x86 laptops

    Tools to remove Intel backdoor firmware (You need to physically clip onto a 8pins chip on motherboards to download/neutralize/flash the rom, nothing else can touch it):
    https://github.com/corna/me_cleaner.

    Neutralize your Intel backdoor:

    Neutralize ME firmware on SandyBridge and IvyBridge platforms

    First introduced in Intelâ(TM)s 965 Express Chipset Family, the Intel Management Engine (ME) is a separate computing environment physically located in the (G)MCH chip (for Core 2 family CPUs which is separate from the northbridge), or PCH chip replacing ICH(for Core i3/i5/i7 which is integrated with northbridge).

    The ME consists of an individual processor core, code and data caches, a timer, and a secure internal bus to which additional devices are connected, including a cryptography engine, internal ROM and RAM, memory controllers, and a direct memory access (DMA) engine to access the host operating systemâ(TM)s memory as well as to reserve a region of protected external memory to supplement the MEâ(TM)s limited internal RAM. The ME also has network access with its own MAC address through the Intel Gigabit Ethernet Controller integrated in the southbridge (ICH or PCH).

    The Intel Management Engine with its proprietary firmware has complete access to and control over the PC: it can power on or shut down the PC, read all open files, examine all running applications, track all keys pressed and mouse movements, and even capture or display images on the screen. And it has a network interface that is demonstrably insecure, which can allow an attacker on the network to inject rootkits that completely compromise the PC and can report to the attacker all activities performed on the PC. It is a threat to freedom, security, and privacy that canâ(TM)t be ignored.

    https://hackaday.com/tag/intel-management-engine/

    Five or so years ago, Intel rolled out something horrible. Intelâ(TM)s Management Engine (ME) is a completely separate computing environment running on Intel chipsets that has access to everything. The ME has network access, access to the host operating system, memory, and cryptography engine. The ME can be used remotely even if the PC is powered off. If that sounds scary, it gets even worse: no one knows what the ME is doing, and we canâ(TM)t even look at the code. When â" not âifâ(TM) â" the ME is finally cracked open, every computer running on a recent Intel chip will have a huge security and privacy issue. Intelâ(TM)s Management Engine is the single most dangerous piece of computer hardware ever created.

    1. Re:Intel CPU backdoors by networkBoy · · Score: 5, Interesting

      Tools to remove Intel backdoor firmware (You need to physically clip onto a 8pins chip on motherboards to download/neutralize/flash the rom, nothing else can touch it)

      Not actually true. You can politely ask the ME to overwrite itself with the FPT.exe or FPTw.exe (dos/windows version). There is also a uEFI and Linux version available, but they're much harder to source.

      The SPI ROM of the system contains 4 regions (normally):
      * BIOS (just what it says)
      * ME (the manageability engine, required to have a min set of features present to boot newer platforms)
      * GbE (your MAC address and the magic numbers for configuring the PHY/MAC are here)
      * OEM (Things like OEM product keys, service tags, etc.

      Now, that min sku that is required to boot the platform in the ME region contains:
      CPU uCode patch
      Power config profiles
      (I really don't remember what else, but it is quite benign)

      What the min sku doesn't contain:
      AMT (advanced management technology: The remote power on/off setting sleep states etc.)
      SOL/IDER (Serial Over LAN / IDE Redirection: essentially the ability to load a local (to you) HDD image to the remote machine and boot to it over lan, rather than the remote machine's local HDD)
      KVM (just what you would think)

      So, in a nutshell, if you're afraid of the big bad ME, then buy min sku'd parts. Avoid Q series (as those have everything enabled).

      The ARC processor is gone BTW, replaced with Tiny IA. Licencing on the ARC and the fact that Intel was shipping an ARM CPU with every board... yeah, not popular internally. The signed Java operations is dead. AFAIK it never shipped live, though there was a hell of a push for it. Customers (Dell, HP, Lenovo) liked it but didn't want to deal with what was involved and most importantly wanted it for free...

      Out of band ethernet for ME was killed off in the transition from ARC to TinyIA.

        And finally, it's not all horrible:
      This feature was designed for corporate users, basically putting a RILO card embedded into every corp desktop. From that perspective it's actually a really cool feature. Now, that it was so tightly integrated was Intel's way of making sure the OEMs bought it. Security was taken *VERY* seriously about this entire environment. Intel knows that if this was breached in a big bad way it would be devastating for it's customers, and thus for it as well.

      Any other questions?

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    2. Re:Intel CPU backdoors by networkBoy · · Score: 4, Informative

      LOL, I don't know why you idiots kept saying it's for "Corporate" chip only when the thing is in all chips marketed under different "features"

      As I had noted, the min Sku is required, but doesn't contain the "bad stuff"TM, it only has CPU uCode patch and Power config profiles, it shuts down the system for several reasons, the most notable is that Intel doesn't want unpatched uCode CPUs out there. The other notable reason is so that they could tell a particular customer (NDA'd) that they *had* to have it to boot, so why not just use the whole thing? That was a total marketing ploy, but ended up being nice for engineering, because we only had to support *one* FW kernel that way. There is a TON of overhead supporting multiple FW kernels, making it only one allowed us to move many people onto more useful projects, rather than parallel teams doing the same basic thing.

      Show me the source code of the so called "FPT.exe" "FPTw.exe", what it actually does, do you have a before and after ROM comparison?

      I'd love to, *but* I'd have to violate an NDA I signed when I left

      Stop parroting Intel sales and look at the problem.

      Hahahahahaha, I'm not parroting sales. I'm speaking from my having spent 6 years working on that project, from Version 3.2 through Version 11, at which point I left the company.

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
  20. Re:Interesting timing re Trump's claims by Anonymous Coward · · Score: 4, Insightful

    They're not using it on russia though.
    They're using it against american journalists, american dissenters, american citizens, and even american polticians whose policies aren't tyrannical enough for their own tastes.

    They're *SUPPOSED* to gather and use information to keep america safe, but it turns out they're the enemy we need to be protected from.

  21. Re: Interesting timing re Trump's claims by fahrbot-bot · · Score: 5, Funny

    Ever heard of the phrase "An angry man is an enemy, and a satisfied man is an ally"?

    Ya. Worst pick-up line - ever.

    --
    It must have been something you assimilated. . . .
  22. Re:Interesting timing re Trump's claims by Anonymous Coward · · Score: 5, Funny

    To be fair: If James Clapper says they didn't, then they did. Not with the white house's knowledge, mind, but that guy's credibility is right down there with POTUS45 himself.

    This leaves us with a time-destroying paradox: Clapper says they didn't, but Trump says that they did. Therefore they absolutely did so, and absolutely cannot have done so. Both possibilities both did and could not have occurred, and our primitive technology does not yet allow us to see the havoc we have wreaked upon our poor continuum.

  23. Re:Interesting timing re Trump's claims by DarkOx · · Score: 4, Insightful

    No, what he said was "I can deny it". Which isn't actually a denial is it. Its a statement, but a meaningless. I can say the "sky is red," its easy to do, but it does not make for a red sky. Clapper is a SOB that has been caught lying before under oath. He escapes prosecution I think because many politicians are afraid of the deep state.

    They told us our phone records were private too unless and until someone got a warrant, turned out that was not exactly the case. We have a secret court FISA, a FUCKING SECRET COURT, for which even after investigation are closed and intelligence actions are completed the records from which remain under seal often for decades! Any truly reasonable interpretation of the Bill of Rights, part of Constitution the highest law of land does not all that shit. The leaks pretty much show the spooks are running basically wild. Its time to go after the three letters and the government can't do because they are scared of their own shadows. Unfortunately that leaves the likes of people who are probably not exactly of great character like Assange to do it.

    So here we are with a CIA run by people Trump was insulting thorough his campaign. They participated in the attribution of the compromise of the DNC and foreign political propaganda (Note not election hacking or stealing because lets face it note vote total tampering has been alleged). Now we find them with a whole suite of tools for performing attacks and making it look like a foreign country, like Russia, did it. Can't get your flunky elected because she is to much a scandal ridden bitch half the country hates, do the next best thing undermine the credibility of the guy who does get elected so nobody will work with him, so he can't implement any reforms, and carry on business as usual. Right?

    Trump might not have any real credibility but even if that is true he has a much as James Clapper, 0, and as much as any of the other three letters. As big a set back as it would be to our overall preparedness, I really believe nothing sort of a near complete housecleaning can fix this. Like literally dissolve the CIA, and NSA, and stand up a new organization with entirely new people former CIA/NSA workers need not apply and put the whole thing back under the control of the Pentagon inside the primary chain of command where it can be properly administrated and observed.

    --
    Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
  24. Re:NYT reported it by MatthiasF · · Score: 4, Informative

    Your reading comprehension skills are terrible. Very first sentence of the article:

    "The NY Times reported that wiretaps of people on the Trump team"

    TRUMP TEAM. No where in either article mentioned does it say that Trump himself or Trump Tower was wire tapped. It's like you people don't even read...at all. I mean, it's EVEN IN THE HEADLINE TOO.

    Another AC spewing pro-Trump, pro-Putin lies. FSB running in over-drive.

  25. Re:Zero Chance by MightyMartian · · Score: 4, Funny

    The President doesn't need the spooks' technological spying techniques. That's what he's got Breitbart and Fox for!

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
  26. Re:Does it include targets? by meta-monkey · · Score: 4, Interesting

    The problem with malware and high tech devices is that they cannot always be accurately contained.

    Oh, very insightful. What, in reading the story from WikiLeaks, about the leaked trove of CIA hacking tools, led you to believe the hacking tools could not always be contained?

    Also, the existence of weapons isn't really a problem. Yes, the government has cyber weapons. They also have nuclear weapons that can annihilate the entire planet. What matters is the manner in which such things are, or are not used. I'm not terrified because the FBI has the ability to kick down my door at any time. Of course they can. Doors have been kickdownable since the invention of doors and kicking. My protection against having my door kicked down is not the removal of boots from the FBI or an unkickdownable door, but a piece of paper that says they can't do it without a warrant from a judge to whom they have demonstrated probable cause that I have committed a crime. So, the CIA's weapons are fine. But is anybody checking to see how they're using them, and who they're using them on? Somehow I doubt it.

    --
    We don't have a state-run media we have a media-run state.
  27. Re:Interesting timing re Trump's claims by gnick · · Score: 4, Insightful

    I'll concede that James Clapper's credibility isn't stellar, but it still contradicts GP's assertion that "nobody has denied." Would Obama be any more credible?
    FTA:

    “Neither President Obama nor any White House official ever ordered surveillance on any U.S. citizen. Any suggestion otherwise is simply false," said Kevin Lewis, a spokesman for the former president.

    Also, James Comey asked the DOJ to deny the assertions, but that stops just short of being an actual denial.

    Trump might not have any real credibility but...as much as any of the other three letters.

    Are you really saying that information coming to us from DJT is as trustworthy as information being published by the FBI/NSA/CIA?

    --
    He's getting rather old, but he's a good mouse.
  28. Re:What's their job again? by JustNiz · · Score: 2

    > "Well they're the CIA, that's their job right?"

    Nope. This is a common misconception. Their job is to protect (and enrich) the US Federal government, not the US people. Thats also true of the police. Their job is to enforce the law, which is written to do the same thing. They really aren't (and can't/won't be) there to protect your ass. Thats just one of the reasons why the 2nd amendment is so important.

  29. Re:Interesting timing re Trump's claims by gnick · · Score: 2

    I was presenting Clapper as an alternative to "nobody." And, as I mention above somewhere, Obama has denied it too. So, which president do you think is telling the truth? It's not both.

    --
    He's getting rather old, but he's a good mouse.
  30. Re:Zero Chance by MightyMartian · · Score: 5, Insightful

    Mod me flamebait if you will, but that's how Trump got to "I was wiretapped!" Via a conspiracy theory from a right wing radio host that Breitbarts picked up and Fox ran with. We have a man at the top of the one of the most powerful espionage machines the world has ever known, and he gets "intel" from right wing commentators. Can't you see this for what it is, a massive vulnerability at the very top of the US Government? A foreign power could game the system by selectively feeding the likes of Levin and Breitbart stories of this kind, and because Trump clearly has no trust of his own departments, and spends far too much time watching television, he would be supremely vulnerable to such manipulation.

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
  31. Re:Interesting timing re Trump's claims by MightyMartian · · Score: 5, Insightful

    Clapper isn't trustworthy, but then again, neither is Trump, who clearly just picked up on a bunch of garbage coming from Levin and Breitbarts, more conspiracy theory nonsense, and running with it. It's pretty clear that no one else in the White House even saw this coming, which is why they really had no way of countering it other than "The President has ways of knowing things!" Considering we can trace the wiretap claim right back to Levin, who was exaggerating the already well known fact that Russian communications were being monitored during and after the election (because concocting anti-Obama conspiracy theories is what right wing radio shock jocks have been doing for eight fucking long years), so we know Trump didn't likely get any of this information from the FBI or any other government intelligence services.

    And now we see as Trump's mouthpieces basically dilute the entire wiretap claim to the point where it was "something", that they're trying to make the entire "wiretapping of Trump Tower" conspiracy theory go away, because what Trump really did was empower and invite Congressional oversight to begin looking even closer at the nonsense going on between Trump's proxies and the Russians during and after the election.

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
  32. Re:NYT reported it by MightyMartian · · Score: 3, Informative

    People keep pointing to this piece of an NY Times story and inserting claims that were not made. It's been known for fucking months that US security services were keeping a damned close eye on Russian communications. If the likes of Sessions and Flynn were so fucking stupid and incautious as to be just chatting up the Russian Ambassador on behalf of their boss, well they deserve what they get. The takeaway here is that Trump and his proxies are fucking morons, regardless of whether they were actually doing anything wrong or not. In politics, the perception of scandal can be as bad as an actual scandal.

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
  33. Re:Interesting timing re Trump's claims by drinkypoo · · Score: 2

    Since the allegation was literally, "President Obama was tapping my phones," and Obama's spokesperson said, "Neither President Obama nor any White House official ever ordered surveillance on any U.S. citizen," it does sound to me like Obama is denying the allegation.

    Which I feel brings us to the point that it would actually be kind of staggering if Trump weren't subject to one or more federal wiretaps, given his and his pals' repeated interaction with many and varied Russians who are persons of interest to the US government for a variety of reasons.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  34. Re:Interesting timing re Trump's claims by fizzer06 · · Score: 5, Interesting

    The question isn't about the spy capabilities. It's about whether these tools are used without logging and review by elected officials from the Congressional security committees.

    On the March 6, 2017 Tucker Carlson show, Congressman Jim Hines admitted Congress (and his committee) is not conducting any meaningful oversight of the spy agencies.

  35. Re:Interesting timing re Trump's claims by MightyMartian · · Score: 4, Interesting

    Just as plausibly, Flynn, Sessions and heaven knows who else simply got caught up in the US government's already well known spying on the Russian ambassador and other Russian officials in the US. In other words, there was no need to directly target Trump and his proxies at all. They literally walked into the existing monitoring that was going on. And really, at that point, if you have some US citizens chatting up Putin's representatives, how is that not justification for seeking FISA warrants to take a closer look at those proxies?

    This is the part that amazes me. Even if I'm willing to accept that Sessions, Flynn, Kushner and whomever else was getting cozy with the Russians weren't committing any crimes, how could these people have gone around imagining that their activities wouldn't be noted by US security agencies? Sessions and Flynn have been around a long goddamned time and certainly must be at least vaguely aware of what the FBI, NSA, CIA and Secret Service are capable of. This either betrays a kind of supreme arrogance, or a level of base stupidity, and in either case doesn't exactly recommend these men to any kind of high office or position of trust. That Flynn and Sessions felt compelled to lie about it makes it all the more curious.

    Here's my opinion, for the little bit it's worth. I don't think even they thought Trump would win. I think both Congressional Republicans and Trump's own team had no real expectation up until the last week or so before the election that they would ever have to be in a position to explain themselves. When he won, and suddenly they had to answer to somebody about their activities (Flynn to Pence and Sessions to the Senate confirmation committee) they suddenly had to answer questions they never imagined would be posed to them. If Trump had lost, nobody would given a flying fuck about Trump's chief advisers and supporters. There might still have been a peak into Trump-Russia leaks, but it wouldn't have been the kind of microscope that's being employed now. And the funniest part is that Trump's propagating the whole wiretapping claim has literally invited both the House and Senate Intelligence Committees to probe even deeper.

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
  36. Re:Obamacare repeal finally imminent. by losfromla · · Score: 3, Informative

    Don't we already have that in place? Don't families already have to stage car-washes and Fund-me campaigns to help pay for medical care?

    --
    Only I can judge you.
  37. Re:Interesting timing re Trump's claims by Anonymous Coward · · Score: 2, Insightful

    If you believe all the "IT'S THE RUSSIANS" narrative then you're a real idiot.

    That's the DNC line that has kinda stuck so they keep running with it. We've heard easily ten different arguments trying to discredit Trump before "the russians!".

    - He's unexperienced!
    - He's not as rich as he says!
    - He wants war with Russia!
    - He hates women!
    - He grabs your pussy!
    - He's crazy!
    - The Pope says he's no good!
    - He's probably doing Ivanka!
    - He's abusing Melania!
    - He hates being president!
    - He's in bed with Russia! -- you are here

    All the above have been attempts at bringing him down. You guys are really running out of ideas.

  38. Re:Interesting timing re Trump's claims by zedaroca · · Score: 2

    The question isn't about the spy capabilities. It's about whether these tools are used without logging and review by elected officials from the Congressional security committees.

    That might be one of the questions for Americans, but the vast majority of the world and of CIA's victims isn't American. Wikileaks isn't American either. This information matters much more for the rest of the world than it does to the American democracy. We can count in one hand the number of Americans drone murdered. Compare that to Pakistanis.
    Most of the American public doesn't care about mass murder outside of America and think all this capabilities and uses are fine as long as it's legal and there is congressional review.

    Did you get the old news about the innocent that was kidnapped by the CIA in Italy, delivered to be tortured in Egypt, and suffered for 4 years? None of the American criminals went to jail. The 22000 American IP addressees in this publication should be the least of the world's concerns.

  39. Re:Interesting timing re Trump's claims by nasch · · Score: 2

    So many strawmen in just one comment... here are your "rebuttals" to things he didn't say:

    "you think the government, any government, should be prohibited from using tools to monitor/spy/whatever on others"

    "Do you think Russia isn't doing the same thing?" (technically this one is a question but it's totally irrelevant to his point)

    " What excuse will you use to justify them doing this but not the U.S.?"