Slashdot Mirror


Intel's ME May Be Massively Infringing on Minix3's Free Software License (ipwatchdog.com)

Software engineer (and IP Watchdog contributor) Fredrik Ohrstrom (a.k.a. Slashdot reader anjara) writes: Almost all Free Software licenses (BSD, MIT, GPL...) require some sort of legal notice (legal attribution) given to the recipient of the software, both when the software is distributed in source and in binary forms. The legal notice usually contains the copyright holder's name and the license text. This means that it's not possible to hide and keep secret the existence of Free Software that you have stuck into your product that you distribute. If you do so, then you are not complying with the Free Software license and you are committing a copyright infringement!

This is exactly what Intel seems to have done with the Intel ME. The Minix3 operating system license requires a legal notice, but so far it seems like Intel has not given the necessary legal notices. (Probably because they want to keep the inside of the ME secret.) Thus not only is Minix3 the most installed OS on our recent x86 CPUs -- but it might also the most pirated OS on our recent x86 CPUs!

251 comments

  1. Do you think they care? by Anonymous Coward · · Score: 4, Insightful

    They're a corporation.

    Lol.

    1. Re:Do you think they care? by NoNonAlphaCharsHere · · Score: 4, Insightful

      Corporationsare people, too, my friend. Thieving, evil, soulless people.

    2. Re:Do you think they care? by gweihir · · Score: 4, Insightful

      So jail them all? Not that I would be opposed...

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    3. Re: Do you think they care? by Z00L00K · · Score: 5, Interesting

      No, just force them to give everyone access to the ME and also how to disable it.

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    4. Re:Do you think they care? by Anonymous Coward · · Score: 1

      Does it really matter at this point? ME is turning into a colossal dumpster fire. Lets say up front they had told us it was minux. Would that have really mattered? Would they suddenly have made it more secure? Would they have given the care it needs? At this point it is looking like no to all of those questions. Oh sure people could have noodled around and figured out more earlier. But it would not change the fact that they did it at all. I have at least 4 computers that will *never* get a firmware update. Do I just rubbish bin them? This is the IoT problem in spades.

    5. Re:Do you think they care? by ChrisMaple · · Score: 1

      Fine Intel 2 shares of Intel stock per instance of infringement, or the cash equivalent, payable to the developers of Minix. That would put ownership of Intel into the hands of the Minix developers, or bankrupt Intel, or both.

      --
      Contribute to civilization: ari.aynrand.org/donate
    6. Re:Do you think they care? by Bruce+Perens · · Score: 3, Insightful

      ME is turning into a colossal dumpster fire.

      You have a point. This is really just another soiled mattress in the dumpster. With used hypos stuck in it.

    7. Re:Do you think they care? by Anonymous Coward · · Score: 1

      Does it really matter at this point? ME is turning into a colossal dumpster fire. Lets say up front they had told us it was minux. Would that have really mattered? Would they suddenly have made it more secure? Would they have given the care it needs? At this point it is looking like no to all of those questions. Oh sure people could have noodled around and figured out more earlier. But it would not change the fact that they did it at all. I have at least 4 computers that will *never* get a firmware update. Do I just rubbish bin them? This is the IoT problem in spades.

      Yes to bold, no to everything else. It matters because, since they didn't attempt to follow the terms of the license, they've wilfully committed one of the largest acts of software piracy. We should not accept that behaviour from the likes of Intel.

    8. Re:Do you think they care? by thsths · · Score: 5, Insightful

      No, corporate employees are not usually evil. The secret of a commercial organisation is to diffuse responsibility, so that you can perform evil actions with non-evil employees. Everybody things they are doing the right thing, just following procedures etc, but the end result is often evil.

    9. Re: Do you think they care? by AmiMoJo · · Score: 3, Informative

      There isn't actually all that much they can do other than demand that every Intel CPU owner gets a copy of the copyright message. Minix was released under a BSD licence so Intel don't have to publish any changes or give up any access, the only requirement being that the acknowledge the original authors and their copyright with every copy they ship.

      At best they could force Intel to waste some money notifying people. Since Intel can't know the details of everyone who bought an Intel CPU (I hope) they would probably have to take out adverts all over the world. That could actually be good though, because it will create more negative publicity about the ME.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    10. Re:Do you think they care? by AmiMoJo · · Score: 5, Interesting

      Hate to say it, but once again RMS is proven right. On multiple counts.

      Who am I kidding, I love saying that.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    11. Re: Do you think they care? by Anonymous Coward · · Score: 0

      X10 and that's how governments work.

    12. Re:Do you think they care? by Anonymous Coward · · Score: 0

      That's what death camp guards said.

    13. Re:Do you think they care? by Wootery · · Score: 0

      Great, you just invented a punishment out of whole cloth. That's now how the law works.

      What sort of damages can Minix claim, here?

      This is one of the problems with copyleft/copycenter licences: they're based on copyright, which is itself based on the profit motive. The software was never being sold in the first place, so damages don't apply in the same way.

    14. Re:Do you think they care? by mwvdlee · · Score: 1

      Nazi concentration camp guards (or in fact everybody working in those camps) were volunteers. Nobody was forced to work in those camps.
      This is actually true for a number of the most extremly amoral things the Nazi's did (like razzia's); those were volunteers and the Nazi's didn't punish those who didn't volunteer either.
      Those guards are 100% guilty and cannot hide behind orders.

      --
      Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
    15. Re:Do you think they care? by Anonymous Coward · · Score: 0

      The copyleft/copycenter licenses are based on the "acknowledge the author" motive.

    16. Re:Do you think they care? by drinkypoo · · Score: 1

      Nazi concentration camp guards (or in fact everybody working in those camps) were volunteers. Nobody was forced to work in those camps.

      Nobody is "forced" to wear anything but a speedo and tape, either, but just try functioning in society dressed like that. I'm not trying to give anyone a free pass, it's better to die and for your whole family to die than to operate a concentration camp, but suggesting that it was wholly a matter of free will is probably bogus.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    17. Re:Do you think they care? by msauve · · Score: 2

      "What sort of damages can Minix claim, here?"

      Didn't read the article, did you?

      --
      "National Security is the chief cause of national insecurity." - Celine's First Law
    18. Re:Do you think they care? by TheReaperD · · Score: 5, Interesting

      I favor the corporate death penalty. And I'm not being facetious, in general. I actually advocate for a corporate death penalty. Equifax and Wells Fargo are perfect examples of why it is needed.

      --
      "Be particularly skeptical when presented with evidence confirming what you already believe." -
    19. Re: Do you think they care? by Anonymous Coward · · Score: 2, Insightful

      This is copyright infringement on a massive scale that they've allegedly committed, not exactly something that a "Here's the notice I was required to show you." will fix.

      If giving notice is all that needs to be done, then I guess the MPAA should drop all of their lawsuits if the people that are allegedly sharing movies would just delete them. See how that just doesn't work?

    20. Re: Do you think they care? by Anonymous Coward · · Score: 1

      There isn't actually all that much they can do other than demand that every Intel CPU owner gets a copy of the copyright message.

      Yes there is. What you describe is the 'nice' way - we won't sue for copyright infringement if you 'make it right'.

      If the copyright owners want to play hardball they can sue for copyright infringement and get statutory damages** for each instance. Since Intel didn't follow the license, they are subject to normal copyright law and have no right at all to distribute the software.

      ** I believe you get statutory damages for copyright infringement, which mens you don't have to show actual monetary losses.

    21. Re:Do you think they care? by Anne+Thwacks · · Score: 1

      Most corporations could be expected to plead "Not guilty by reason of insanity" - as a juror, I would be tempted to accept the plea from many of them, including Equifax - provided the penalty is all directors being sent to the loony bin for life.

      --
      Sent from my ASR33 using ASCII
    22. Re: Do you think they care? by fortfive · · Score: 1

      But who would be the plaintiff?

    23. Re: Do you think they care? by Anonymous Coward · · Score: 0

      Funny thing is that it doesn't take a genius to predict what RMS had always predicted. We are just THAT profoundly stupid, but it doesn't sound so bad since we like to call it pragmatism.

    24. Re:Do you think they care? by Anonymous Coward · · Score: 0

      Actual testimony of certain guards suggests otherwise.

    25. Re:Do you think they care? by Anonymous Coward · · Score: 0

      They're a corporation.

      Lol.

      They did it for the lulz.

    26. Re: Do you think they care? by Anonymous Coward · · Score: 0

      Anyone who bought an Intel system under the impression everything in the system was properly licensed has standing to sue for false and misleading advertising, as an omission is still misleading.

    27. Re: Do you think they care? by mseitz · · Score: 2

      Vrije Universiteit, Amsterdam, The Netherlands http://git.minix3.org/index.cg...

    28. Re:Do you think they care? by Anonymous Coward · · Score: 0

      Yes, it would matter. It wouldn't be a copyright infringement then.

    29. Re:Do you think they care? by OrangeTide · · Score: 5, Insightful

      If the copyright infringement is willful, the maximum penalty increases to $150,000 per violation.

      Why not use MPAA and RIAA tactics against Intel? They can pay $150k per CPU they shipped in the last several years. If the Minix copyright holders are feeling nice, they can accept a lesser settlement instead.

      That's how the law works.

      --
      “Common sense is not so common.” — Voltaire
    30. Re: Do you think they care? by Anonymous Coward · · Score: 1

      Since the ME can be remotely "managed" (with power and a network connection active), why not require Intel to exercise that capability to push an update that will start showing the notice each time the PC is started?

      RO

    31. Re: Do you think they care? by Anonymous Coward · · Score: 0

      You're both called faggots. Get your terminology straight.

    32. Re:Do you think they care? by OrangeTide · · Score: 2

      Do you think perhaps they volunteers to avoid going to the front lines? The concept of choice during a war is not the same concept we enjoy. It's difficult to take statements from even half of the participants and conclude that all of them desired to do it. I guess call me skeptical of wide sweeping generalizations.

      --
      “Common sense is not so common.” — Voltaire
    33. Re:Do you think they care? by OrangeTide · · Score: 2

      Sorry, this is all theoretical. There is no way that Andrew S. Tanenbaum would move ahead with any sort of legal action.[1]

      --
      “Common sense is not so common.” — Voltaire
    34. Re: Do you think they care? by mysticgoat · · Score: 1

      I just read the Minix 3 licensing agreement. The link in parent post is accurate.

      A key phrase is " Any deviations from these conditions require written permission from the copyright holder in advance."

      Intel may have obtained the necessary written permission to use the code without acknowledging the source. This is not FOSS (possibly if FOSS had been around when Dr Tanenbaum created Minix he and the university would have used one of the FOSS licenses. But possibly since Minix is derived from BSD Unix they would not have been able to FOSS it even if FOSS was around back in that day).

      The logical next steps in pursuit of truth, justice, etc, is to ask Intel if it has a written waiver, and ask Vrije Universiteit if it has granted such a waiver to Intel. Since Dr Tanenbaum released Minix with the intent of making it easier for colleges and universities to teach Unix skills (it has been used extensively in Nicaragua for that purpose during that country's troubled times), it is probable that a number of written waivers have been granted over the years.

    35. Re:Do you think they care? by Anonymous Coward · · Score: 0

      gp here. My point was it does not matter if you can see the code. You have no real access to the hardware or their custom changes. I can if I want probably find the whole source tree to WinCE and Windows. Guess what it does not matter. Just seeing the code is meaningless. Modifying the code and being able to deploy the code is meaningful. The license minux is under is basically 'yep we used some code'. So they did not do the attribution does not fix the underlying issues.

      The conspiracy business side of me would bet that the ME is how they are setting the settings on the different CPUs. So they can enable and enable/disable features and clocks on the CPU through hardware back doors. That is why they do not want us to see this.

      The OEMs have locked us out so they can play shenanigans too. I for a fact know my laptop can do other things yet the BIOS locks me out of them. It has turned on things that I want turned off so I can do other things too. Yet no access because they locked me out. I live with it because the computer is capable enough. But I wanted something extra to tinker with.

      On 3 of my computers short of a full disassembly (not simple 4 screw task) then hooking up some wires to the jtag ports (if I can find them) I am SOL.

    36. Re:Do you think they care? by Anonymous Coward · · Score: 0

      No, not everyone is equally responsible: the ones on the top, the ones that have 100 or 1000 times the salary of the average employee in the company, are the ones that make the decisions and *should* bear the responsibility. But since they are also the people with most power (including political), the system is rigged so that they are never held accountable. All the benefits, none of the responsibilities.

      The very fact that you tacitly (implicitly) exonerate them, is a sign of the clout these fat and well connected people possess.

    37. Re:Do you think they care? by thegarbz · · Score: 1

      So jail them all? Not that I would be opposed...

      To be clear, you wouldn't be opposed to the Government shutting down one of the two remaining PC chip manufacturers and granting a monopoly to the manufacturer who produces core computer parts all over the world?

      I think you didn't think this through.

    38. Re: Do you think they care? by thegarbz · · Score: 1

      That could actually be good though, because it will create more free advertising about the ME.

      FTFY. People don't care about the negative parts of it. They sure as hell wouldn't care about some copyright violation.

    39. Re:Do you think they care? by thegarbz · · Score: 1

      I generally favour not reducing a oligopoly to a monopoly. Corporate death penalties are usually worse on the market, consumers, workers, and people who own any kind of investments including retirement savings than they are on any of the people involved in the decisions for which you are demanding justice.

    40. Re: Do you think they care? by viperidaenz · · Score: 1

      Neither Intel or VU would be under any obligation to answer your questions.
      It's possible Intel asked VU to not disclose any agreements they have.

    41. Re: Do you think they care? by Anonymous Coward · · Score: 0

      No, intel should have thought that thru before hand.

      Fine the company the maximum allowed for each violation. Problem solved.

    42. Re: Do you think they care? by goose-incarnated · · Score: 1

      Actually the copyright owner is not forced to license the material. In cases of violation a copyright owner can simply decide to revoke the license.

      --
      I'm a minority race. Save your vitriol for white people.
    43. Re: Do you think they care? by Anonymous Coward · · Score: 0

      That's just not true. In copyright if they're not complying with every part of the licence then they're illegally distributing the software, which means they're a copyright infringer.

    44. Re:Do you think they care? by Anonymous Coward · · Score: 0

      Well, it's either that or breaking up massive corporations into tiny pieces, perpetually prohibited from recombining.

      I mean, we saw what happened to Ma Bell after the breakup, they've mostly recombined now, we've really only got SBC and Bell Atlantic left out of the RBOCs, SBC calls themselves AT&T now, Bell Atlantic calls themselves Verizon, and they're both operating nationally.

      Something has to be done, the status quo is thoroughly broken. So it's either we start revoking corporate charters or start splitting them into tiny pieces. Intel could probably be turned into a few thousand small businesses.

    45. Re: Do you think they care? by Anonymous Coward · · Score: 0

      Minix is not derived of anything, it's all original educational operating system.

    46. Re:Do you think they care? by Anonymous Coward · · Score: 0

      From the same web page

      Also a hint was the discussion about the license. I (implicitly) gathered that the fact that MINIX uses the Berkeley license was very important. I have run across this before, when companies have told me that they hate the GPL because they are not keen on spending a lot of time, energy, and money modifying some piece of code, only to be required to give it to their competitors for free.

      And

      ...If nothing else, this bit of news reaffirms my view that the Berkeley license provides the maximum amount of freedom to potential users. If they want to publicize what they have done, fine. By all means, do so. If there are good reasons not to release the modfied code, that's fine with me, too. Yours truly, Andrew S. Tanenbaum

      Then, after further reflection.

      If I had suspected they might be building a spy engine, I certainly wouldn't have cooperated, even though all they wanted was reducing the memory footprint (= chip area for them). I think creating George Orwell's 1984 is an extremely bad idea, even if Orwell was off by about 30 years. People should have complete control over their own computers, not Intel and not the government. In the U.S. the Fourth Amendment makes it very clear that the government is forbidden from searching anyone's property without a search warrant. Many other countries have privacy laws that are in the same spirit. Putting a possible spy in every computer is a terrible development.

      Andrew Tanenbaum just proved that intelligence does not equal wisdom. Richard Stallman is always right.

    47. Re:Do you think they care? by currently_awake · · Score: 1

      only the senior executives of a corporation have control over what it does, so only they should be arrested for the crimes of the corporation. The shareholders would appoint new ones and the corporation would continue.

    48. Re:Do you think they care? by Anonymous Coward · · Score: 0

      Actually, in the ever prevelent "The corporation MUST increase the wealth of the shareholders at all costs" world, it's the shareholders who are responsible for the corporation's actions.

      As you said, they can just appoint new executives to do their bidding if they don't like the company's current direction, so they should just as easily be able to appoint new executives to make sure the corporation doesn't commit crimes against the public.

      Most people just don't like biting the hand that feeds them, so nothing happens. Sooner or later however, society's going to have to ask which is more important: Society's longevity, or continuing to fill some fat cat's overflowing bank account.

    49. Re: Do you think they care? by gweihir · · Score: 1

      That would be nice. Of course Intel would just move to another OS then. No, the only way to fix this is if some country with enough clout (or the EU) forces Intel to do that. This also has some connection to the "right to repair".

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    50. Re:Do you think they care? by gweihir · · Score: 2

      Make that not a "penalty", but a safety-measure to protect society and I am on board. I think there just needs to be a limit of how much damage to society a corporation is allowed to do before it gets dismantled.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    51. Re:Do you think they care? by gweihir · · Score: 1

      Of course "them all" means exactly that. And you could allow for a transition period to bring in new people.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    52. Re:Do you think they care? by cas2000 · · Score: 1

      Corporate death penalties are usually worse on the market, consumers, workers [...]

      How can you say "usually" when it's never actually happened?

      Sounds like yet more libertarian theology, gospel explaining why it's a mortal sin to hold corporations to account for their actions.

      The same kind of bullshit as "taxing or fining corporations or requiring them to pay living wages etc etc etc is wrong and/or pointless because they'll just pass it on to the consumers" (hints: 1. no, they won't - there's a very small limit as to what they can get away with passing on before they price themselves out of the market. Most, or even all of it in some cases, will come out of their profit margins; 2. consumers don't have a right to havie their goods and services subsidised by tax payers or employees of a corporation)

    53. Re: Do you think they care? by Brockmire · · Score: 1

      It was stated in a previous story here on Slashdot that Intel does have a license for their version. So when I saw this article (very shitty at that), I wondered why there was no mention of Intel having a private license to do whatever the fuck they want.

    54. Re:Do you think they care? by thegarbz · · Score: 1

      How can you say "usually" when it's never actually happened?

      You just assume it's never actually happened where the reality is that it has happened before indirectly and has had an impact big enough to be felt even when a company limps along on lifesupport.

      You don't need to go in swinging with an axe to kill a company, and you don't need to make sure that it has no pulse in order to achieve the effects described above.

      Sounds like yet more libertarian theology, gospel explaining why it's a mortal sin to hold corporations to account for their actions.

      Nope, just a simple observation combined with a shitload of very logical causal relationships. Its like the people on Friday calling out Germany for not giving VW the corporate death penalty or even severe fines. Given that VW stake of state, German private, and German institutional investors makes up nearly half of the entire investment in the company, killing them will have even more of a negative impact on Germany and German people than the saga already has.

      Same with all those calling for the dead of that British company during the gulf spill, despite the fact that this British company has a largest stake of holdings by Americans, in America, supporting predominantly jobs in America, and while they are actually recovering quite well, the drop in shareprice had more of an affect on American people's 401k than the people responsible for the spill.

      But by all means you may be right. The world may be better off with a single AMD monopoly. I'm sure THIS monopoly will be different.

    55. Re:Do you think they care? by ausekilis · · Score: 1

      I'll believe corporations are people when Texas executes one.

    56. Re:Do you think they care? by Anonymous Coward · · Score: 0

      I mean, we saw what happened to Ma Bell after the breakup, they've mostly recombined now, we've really only got SBC and Bell Atlantic left out of the RBOCs, SBC calls themselves AT&T now, Bell Atlantic calls themselves Verizon, and they're both operating nationally.

      Now I'm thinking about how cool it would have been for the liquid-metal Terminator pieces to have re-formed into two mini-Terminators...

    57. Re:Do you think they care? by david_thornley · · Score: 1

      In my grad school days, I got into student government. I got to see people at all levels of the hierarchy, so I came away knowing that a system designed to serve students, with people at every level who want to do a good job, can screw them over pretty good.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    58. Re:Do you think they care? by Wootery · · Score: 1

      Ha, you got me, I'm a Slashdotter. And now I see the whole section of the article on exactly that topic :-P

      Tanenbaum seems to be using a curious line of reasoning there, though.

      secretive use of Free Software inside what Tanenbaum himself calls a “spy engine”, can also be said to explicitly contradict the intent of the author of the Free Software. As Tanenbaum writes: “I certainly wouldn’t have cooperated [...]” One might therefore expect that it would have been costly for Intel to buy Tanenbaum’s cooperation for secret distribution of Minix 3, had it been at all possible.

      Except of course for Freedom 0. Neither the GPL nor BSD-style licences put any stock in the author's distaste for potential applications of their work. If they did, they wouldn't qualify as Free Software licences.

      I don't see why we should care about how much Intel would have had to have paid Tanenbaum to get him onboard. Their mistake was 'only' in failing to attribute, not in failing to hire him as a consultant.

      the amount of damages that can be argued for, is remarkable

      They can argue whatever they like, but there's no precedent here as far as I'm aware.

    59. Re:Do you think they care? by Wootery · · Score: 1

      Interesting ideas. Is there precedence here? This can't be the first time a product has been shipped that infringes copyrights.

  2. Not Sure by Anonymous Coward · · Score: 0

    Not sure if shitposting or retarded...

    1. Re:Not Sure by DivineKnight · · Score: 0

      Well, the other option is /. performing real research / reporting, which, as the site has changed hands so many times, probably lacks the crew necessary to do that.

      And how might one find some tech news / discussions, were they looking for it? Well, keeping a permanent IRC window open to #linux on freenet might be a good place to start; there are probably a few other channels that are filled with idle chatter and interesting topics, if one looks; there are always mailing lists...and there are newsgroups (NNTP), which contain useful stuff if you stop browsing alt.binaries.*.

    2. Re: Not Sure by Anonymous Coward · · Score: 0

      This is modern Slashdot. [whynotboth.jpg]

  3. No by Anonymous Coward · · Score: 4, Informative

    "Intel's ME **May** Be Massively Infringing on Minix3's Free Software License "
    [Emphasis mine].

    No. They aren't Even the author of Minix thinks it's fine. He thinks it's rude they didn't even tell him. But but didn't have to.

    http://www.cs.vu.nl/~ast/intel/

    1. Re:No by Z00L00K · · Score: 1

      Rude and flattering, but I think that the unwillingness to tell that Minix was used is due to the "security due to obscurity" reason.

      But now when the genie is let loose then it's more a question of when the ME will be hacked.

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    2. Re:No by Anonymous Coward · · Score: 0

      Does not matter what he thinks, what the license itself says is what matters in a court of law.

    3. Re:No by Bruce+Perens · · Score: 3, Informative

      Does not matter what he thinks, what the license itself says is what matters in a court of law.

      If he's the only copyright holder, the decision to sue or not is entirely in his hands. Nobody else would have a right to sue.

    4. Re:No by mschwanke97402 · · Score: 1

      Does not matter what he thinks, what the license itself says is what matters in a court of law.

      Except only the rightsholder has the standing in court to enforce the license.

    5. Re: No by Anonymous Coward · · Score: 0

      Not entirely true. The govt can still proceed with legal proceedings when the infringed party doesnt. Take for instance aaron swartz.

    6. Re:No by Carewolf · · Score: 1

      Does not matter what he thinks, what the license itself says is what matters in a court of law.

      If he's the only copyright holder, the decision to sue or not is entirely in his hands. Nobody else would have a right to sue.

      Wasn't there a case recently where one company sued the other for violating the GPL? But the company suing was not a copyright holder but they were allowed to sue anyway, because they were a competitor.

    7. Re: No by Anonymous Coward · · Score: 0

      Except only the rightsholder has the standing in court to enforce the license.

      Apart from the rights holder, there are an astonishingly large number of people with standing in Federal courts.

      Many recent examples here on Slashdot.

    8. Re: No by Hal_Porter · · Score: 1

      The US government took the position that Swartz had to die because he created Reddit which made him Literally Worse Than Hitler. That's a separate issue from copyright,

      --
      echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
    9. Re: No by Zero__Kelvin · · Score: 1

      Sure, but there is no law against changing ones mind. If enough people were to talk to Tanenbaum about why it actually IS a big deal he might be persuaded. They DiD for a fact violate. Tanenbaum can choose to do nothing, but that doesn't mean it didn't happen. A thief who gets a pass from the victim is still a thief even if he never gets prosecuted for the crime.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    10. Re:No by Kjella · · Score: 1

      If he's the only copyright holder, the decision to sue or not is entirely in his hands. Nobody else would have a right to sue.

      In civil court yes, but I think it would be possible to file a criminal complaint. Like if I'm an author and I've sold you the exclusive right to sell my book in the US, but we've had a falling-out and now I'm playing scorched earth. Can I now say "fuck you, not enforcing my copyright" and implicitly let everyone else print and sell my book? If it amounts to commercial copyright infringement it's the public prosecutor making the charge, not the victim. Of course you couldn't get damages, you couldn't stop non-criminal infringement and the standard of evidence is now "beyond a reasonable doubt" so the contract should have been better but I don't think you're completely helpless. Not sure if it would actually work in practice though, since it'd be up to the attorney general's office whether or not to prosecute.

      --
      Live today, because you never know what tomorrow brings
    11. Re: No by Anonymous Coward · · Score: 0

      Wrong. Anyone that bought an Intel system under the impression that everything in the system was properly licensed has standing to sue for false and misleading advertising.

    12. Re:No by Anonymous Coward · · Score: 0

      That makes no sense if it's an open source license. If they're denying me my rights, by hiding the license. I should have a right to sue for that.

    13. Re: No by Anonymous Coward · · Score: 0

      It doesnt matter why, the point is the government can act on civil cases without the infringed party doing the same.

    14. Re:No by Anonymous Coward · · Score: 0

      Could be a US vs. Netherlands thing, but if a US professor creates intellectual property relevant to their post, the university is at least part owner. My superficial research indicates this is not the case here. Like I needed another reason to be envious of Europe.

  4. Re:DON'T FORGET LINUS ALSO STOLE MINIX! by Z00L00K · · Score: 0

    The same analogy as you have to pay a fee for looking at other buildings to build your house.

    It's not unusual to look to the work of others to learn from their mistakes when you do something new.

    --
    If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
  5. Nothing to see here by Sephr · · Score: 3, Interesting

    Intel paid for a license and the parties involved are under an NDA.

    1. Re:Nothing to see here by Anonymous Coward · · Score: 2, Interesting

      I don't think there was money involved, and i don't think there was an NDA.
      http://www.cs.vu.nl/~ast/intel...

      But they had a license :)

    2. Re:Nothing to see here by Gavagai80 · · Score: 1

      "If nothing else, this bit of news reaffirms my view that the Berkeley license provides the maximum amount of freedom to potential users."

      In this case, clearly the maximum freedom for the distributor-user to remove the freedom of the end user has been achieved.

      --
      This space intentionally left blank
    3. Re:Nothing to see here by fph+il+quozientatore · · Score: 1

      Not sure. At least for a modern free software project, this would not be viable because there are too many contributors: you have to contact everyone who submitted a patch and get their agreement if you want to relicense their code.

      --
      My first program:

      Hell Segmentation fault

    4. Re:Nothing to see here by anonieuweling · · Score: 1

      Slasdotted as cs.vu.nl appears, do we have a mirror?

    5. Re:Nothing to see here by Megol · · Score: 1

      Where did you see that they were exempt from the documentation part of the license? I also think that it is fine not documenting the use for this case but being interested in the development doesn't give a copyright/license exemption.

    6. Re:Nothing to see here by Megol · · Score: 1

      What freedom have been removed?

    7. Re:Nothing to see here by lucasnate1 · · Score: 2

      The freedom to modify the ME and disable it.

    8. Re:Nothing to see here by Anonymous Coward · · Score: 0

      So will still have the rights to use it to "kill time and make babies or the reverse, if preferred" as was allegedly permitted by the original BSD licence.

    9. Re: Nothing to see here by Zero__Kelvin · · Score: 1

      They had a license, but they didn't use it. They violated the terms so the license is null and void in this case. Tanenbaum is wrong when he says it is proof the license confers maximum benefit, since again, they didn't adhere to the terms of the license.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    10. Re:Nothing to see here by Anonymous Coward · · Score: 0

      Intel paid for a license and the parties involved are under an NDA.

      WTF are you talking about, Tenenbaum's open public letter to Intel clearly stated his surprise that Intel had used Minix... they violated the license, it's there for everyone to see.

    11. Re: Nothing to see here by Anonymous Coward · · Score: 0

      Most patches are public domain source code with no special licensing.

    12. Re:Nothing to see here by viperidaenz · · Score: 1

      WTF are you talking about, Tenenbaum isn't the copyright holder. The licence clearly states the owner is Vrije Universiteit, Amsterdam,
      The Netherlands.

    13. Re:Nothing to see here by RockDoctor · · Score: 1
      Was it ever possible to buy these chipsets without the ME? Not as far as I understand it. New chipset, new features ; if you want the new features, you get them all, whether you want them or not.If you don't want the new fetures, buy a different chipset. If Intel have stopped supplying previous similar (but not the same) chipsets AND you have a contract with them to supply the old chipsets, feel free to sic your lawyers onto them. I wouldn't be surprised if Intel still make a few thousand (e.g.) radiation-hardened 386s a year for NASA, the NSA and military. They probably don't have the ME enabled.

      If you don't like the Intel ME, don't buy machines with Intel chipsets. It ain't rocket science. Let Intel go bust and wouldn't even change the side of the paper I wipe my arse with.

      --
      Birds are not dinosaur descendants;birds are dinosaurs, for all useful meanings of "birds", "are" and "dinosaurs"
  6. Settlement terms: All CPU code must be released by Anonymous Coward · · Score: 2, Interesting

    But honestly I think we still need to focus on developing CPUs and SoC for which the end-users have complete control over every aspect if we want to inevitably gain control over our devices. We also need a complete set of source code for other chipsets. From wifi an GSM modem chips to graphics and keyboard controllers. It seems that right now the only real project with any progress aiming to do that is EOMA68. Unfortunately this stuff take YEARs and we still don't ultimately have a card or standard compliant device in hand yet. Though there are people already at work on CPUs and similar so it's a start and we do have EOMA68 designs that work and prototypes even if the final cards and devices aren't yet shipping.

    1. Re:Settlement terms: All CPU code must be released by viperidaenz · · Score: 1

      If I go and buy an EOMA68 PC, I get freedom from the Intel ME.
      In return I get to run what ever code Allwinner embeds into it's SoC, perhaps on behalf of the Chinese Government [1]. With the blazing speed of a dual-core Cortex A7 CPU! Quite similar in performance to the first Pentium 3's

      [1] https://medium.com/@Hoplite/ch...

  7. SoSuMi by mveloso · · Score: 1

    Note that Intel doesn't violate IP, it licenses it. The idea that Intel could violate an IP law is ludicrous.

    1. Re:SoSuMi by Bruce+Perens · · Score: 3, Informative

      The idea that Intel could violate an IP law is ludicrous.

      Ha ha ha ha ha he he. Haw. Snort.

      First, you can look at the number of patent infringement lawsuits against them, some of which they lost.

      Then, you can consider that any company, regardless of its size, can have a failure of due diligence.

      I get paid to fix them all day long.

    2. Re:SoSuMi by kikukikuki · · Score: 1

      We need to ask Andrew Tanenbaum if Intel has paid for an unlimited license, or not https://en.wikipedia.org/wiki/... Can someone contact him in Holland to find out?

    3. Re: SoSuMi by Zero__Kelvin · · Score: 1

      He has already publicly stated he had no idea the code was being used and that they contacted him for support which he would not have given if he knew what it was for, so no need to ask what has already been proffered.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    4. Re:SoSuMi by viperidaenz · · Score: 1

      No. Andrew Tanenbaum isn't the copyright owner. The university is.
      What we've got is Andrew Tanenbaum stating Intel talked to him about licensing. What probably happened after that was Intel had their lawyers talk to the legal department from the university and got permission to use the software without the requirement of disclosure. They probably also asked the university not to go blabbing about it to anyone.

  8. The copyright holder does not seem to care... by williamyf · · Score: 4, Informative

    ... For now.

    1.) AST published an open letter, and the fact that the disclaimers are not posted does not seem to bother him much.
    See here: http://www.cs.vu.nl/~ast/intel...

    2.) Minix3 License, states that, when distributed in Binary form, the DOCUMENTATION has to reproduce the copyright notice and, well, there is no documentation whatsoever abut the ME.
    See here: https://github.com/Stichting-M...

    Having said that, security through obscurity is not a sensible policy, and AST's courtesy is not enough. If intel is using minix, they should say so and print the license.

    --
    *** Suerte a todos y Feliz dia!
    1. Re:The copyright holder does not seem to care... by Bruce+Perens · · Score: 1

      The license actuall says documentation and/or other materials provided with the distribution.

      So, your legal theory doesn't fly, sorry.

    2. Re:The copyright holder does not seem to care... by Anonymous Coward · · Score: 0

      There is documentation about every publicly available Intel product.

    3. Re:The copyright holder does not seem to care... by Antique+Geekmeister · · Score: 1

      For casual readers who don't know who "AST" is, that letter at http://www.cs.vu.nl/~ast/intel... is from Andrew S. Tannenbaum, the primary author of Minix. In the letter, he accepts Intel's current behavior quite explicitly. Andrew also complains, in a postrscript, about the use of ME as a spy engine. If Minix were published under a GPL, instead of a BSD license, Minix developers could demand that ME publish the source code for their modifications used to create the spyware. It is precisely that kind of secretive and abusive misuse of open source work that free software and the GPL licenses was designed to prevent.

    4. Re:The copyright holder does not seem to care... by skiminki · · Score: 1

      Are the management engine binaries stored in the CPU or are they loaded from the motherboard? If the latter, the CPU doesn't ship with Minix and the notices should come with the motherboard, right?

    5. Re:The copyright holder does not seem to care... by Megol · · Score: 1

      And here I pop up again and point out that security through obscurity _IS_ added security and _IS_ a valid choice in a system otherwise designed for security.

    6. Re:The copyright holder does not seem to care... by Anonymous Coward · · Score: 0

      Minix is only around 5000 lines. 5000 very well written lines, but still, don't you think that Intel can make something like it quite quickly?

    7. Re:The copyright holder does not seem to care... by tlhIngan · · Score: 1

      If Minix were published under a GPL, instead of a BSD license, Minix developers could demand that ME publish the source code for their modifications used to create the spyware. It is precisely that kind of secretive and abusive misuse of open source work that free software and the GPL licenses was designed to prevent.

      Nope, GPL wouldn't help you there, either. If Intel chose to use Linux instead, the spyware wouldn't be covered under the GPL. (And there's far more case history for this example than Minix - think of all the stuff that ships with Linux, including Android phones).

      ME is a platform. Like Linux, or Windows, or Android, or whatever. At its base layer, it provides essential power management functionality to the CPU, so you can never disable it completely - doing so means you have a nice expensive paperweight as you need the ME firmware in order to get the chip to start booting code.

      The spyware, AMT (remote admin tools), etc., all run on top of the ME platform. They are mere applications.When you hear of "disable ME", all it really means is the ME runtime environment is disabled, so you cannot run applications on top of it.

    8. Re: The copyright holder does not seem to care... by Anonymous Coward · · Score: 0

      I don't think you understand the complexity of reproducing something and assuring identical behaviour.

    9. Re:The copyright holder does not seem to care... by thegarbz · · Score: 1

      well, there is no documentation whatsoever abut the ME.

      You've never been to Intel's website have you? There is a fuckton of documentation on the ME. There is with pretty much everything that gets used for corporate resource management and that is one of the primary selling points of ME.

    10. Re:The copyright holder does not seem to care... by Nite_Hawk · · Score: 1

      What makes you think that? Security through obscurity just means that it will take longer for the majority of the world (including yourself) to find out about the flaws. All it really does is grant the people with resources to find those flaws a bigger window of time to operate on them before being caught.

      The ramifications are huge too. It's one thing to get hacked, it's another thing to get hacked and never find out (or never be able to plausibly claim that's what happened).

    11. Re: The copyright holder does not seem to care... by Anonymous Coward · · Score: 0

      Good morning, Agent Smith! How's the weather in Fort Meade today?

    12. Re:The copyright holder does not seem to care... by Anonymous Coward · · Score: 0

      The CPUs come with documentation

    13. Re:The copyright holder does not seem to care... by williamyf · · Score: 1

      The license actuall says documentation and/or other materials provided with the distribution.

      So, your legal theory doesn't fly, sorry.

      I know #2 does not fly.

      But, who is going to sue intel for infringment?

      The copyright holder is AST, and he is quite ok with the current state of affaires.

      The other Option is Vrije Universiteit, and considering the amount of graduates that go work for ASML/Intel, I seriously doubt it...

      --
      *** Suerte a todos y Feliz dia!
    14. Re:The copyright holder does not seem to care... by williamyf · · Score: 1

      I came back to add an addendum:

      My reply was don with all due respect. I was almost certain that #2 was not valid, as IANL. Far from me to catch an online fight with Bruce Perens. A fight which I am certain to lose.

      You being a prominent guy in FOSS, probably have more chances of making AST or the Vrije Universiteit to reconsider their stance and either request compliance, or sue Intel for infringement.

      In the meantime, again, only AST or Vrije Universiteit can demand intel to comply or sue them, and so far, they do not seem inclined to do so.

      --
      *** Suerte a todos y Feliz dia!
    15. Re:The copyright holder does not seem to care... by viperidaenz · · Score: 1

      They're embedded in the BIOS. The ME runs on a processor in the chipset, not the CPU itself.

    16. Re:The copyright holder does not seem to care... by Anonymous Coward · · Score: 0

      The copyright holder has shown a lack of interest to protect their IP. This has now destroyed the IP from future exploitative protection efforts. This hole is a big deal for minix and moreover all of their partners.

  9. The license is four sentences. Read it by raymorris · · Score: 5, Informative

    The Minix3 standard license is four sentences:
    http://git.minix3.org/index.cg...

    The second clause / sentence of the license is:

    --
          * Redistributions in binary form must reproduce the above copyright
            notice, this list of conditions and the following disclaimer in the
            documentation and/or other materials provided with the distribution.
    --

    Intel did not comply with that. Intel violated the license. That's a fact. Tanenbaum isn't too mad about it, and that's fine. If he chooses not to sue them that's all well and good, but it doesn't change the fact that they did not comply with the license. Note Minix can ALSO be licensed under other terms - a company can contact the copyright holders to negotiate a different license, which may include payment. Intel didn't do that.

    They had no right to make and sell copies of Minix as part of their CPU, since they didn't do so under the normal license.

    Many years ago, Minix wasn't open source. It was sold for $69 / copy. After inflation that's about $150 in 2017 dollars. If Intel has unlawfully sold 500 million copies which they'd now need to pay Tanenbaum for - well he could be a very rich man if he chose to. Even at $1 per copy that's $500 million that Intel owes him.

    1. Re: The license is four sentences. Read it by Anonymous Coward · · Score: 0

      Minix wasn't "Open Source" (tm) but it was always distributed as source code. It was/is a pedagogical textbook OS that has grown into something real.

    2. Re:The license is four sentences. Read it by Waffle+Iron · · Score: 5, Funny

      Maybe they *did* reproduce the copyright notice. For all we know, it might be etched somewhere on the CPU die in 100nm-tall characters.

    3. Re: The license is four sentences. Read it by Anonymous Coward · · Score: 0

      A copyright notice that isnt viewable before sale isnt valid. Same thing goes when copyright notices and terms and conditions were inside the box pre-internet and the only way to see it was by ripping open the seal.

    4. Re: The license is four sentences. Read it by Megol · · Score: 1

      There have to be no copyright notice at all for the copyright to be valid. The copyright doesn't have to be registered to be valid.

      The potential problem here is that the license states that it should be noted somewhere that the product uses Minix, not that the copyright notice for Minix wasn't visible before buying the product.

    5. Re:The license is four sentences. Read it by AmiMoJo · · Score: 1

      Even if he personally doesn't want to get rich off it, perhaps any settlement money could be invested in reverse engineering enough of the ME to replace the only currently unremovable bits, i.e. the early boot stuff.

      Or better still do the same for AMD parts, so that people who care about security and privacy aren't motivated to give Intel more money.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    6. Re: The license is four sentences. Read it by Anonymous Coward · · Score: 0

      After logging in to the ME, just cat license.txt.

    7. Re: The license is four sentences. Read it by Zero__Kelvin · · Score: 1

      I think the big win here is that Intel is distributing license violating code in an encrypted form and now the question is what other violations are there. Since the only way to determine that is to give access to the decryption mechanism to actually be able to look at it ....you see where I'm going with this.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    8. Re:The license is four sentences. Read it by Anonymous Coward · · Score: 0

      Tanenbaum is a jerk who doesn't see anything wrong with Intel using his OS to backdoor every CPU.

    9. Re:The license is four sentences. Read it by Anonymous Coward · · Score: 0

      Hah. $1, nothing. Isn't willful infringement $150,000 per instance?

    10. Re:The license is four sentences. Read it by Megane · · Score: 1

      in the documentation and/or other materials provided with the distribution.

      Etching it on the CPU die, or even "it's in the binary somewhere!" is specifically not good enough. The ME's use of Minix being a surprise to everyone indicates that they in fact did not follow this term of the license.

      --
      #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
    11. Re: The license is four sentences. Read it by Megane · · Score: 1

      After logging in to the ME

      Oh, you!

      --
      #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
    12. Re:The license is four sentences. Read it by viperidaenz · · Score: 1

      Do you have a copy of the ME binary distribution?
      Are you sure that notice is not in documentation motherboard vendors get when they add it to their BIOS?

      Unless you bought an Intel motherboard from Intel, there's nothing Intel should be telling you directly.

      The ME code is distributed by your motherboard vendor.

      Also, Dr Tanenbaum wouldn't get rich, the university would, as they own the copyright, not him. He wasn't aware of the use of Minix in a particular Intel product, but they did discuss the licence.
      Intel knew all about the licence. Don't be surprised if they got permission and an NDA from the university in exchange for a donation.

    13. Re:The license is four sentences. Read it by Anonymous Coward · · Score: 0

      > Redistributions in binary form must reproduce the above copyright notice

      Suppose they included it in the ME file system. Sounds like they did comply, there is nothing in the license about having better access to the license than to the binaries.

    14. Re:The license is four sentences. Read it by Anonymous Coward · · Score: 0

      By not aggressively upholding the license, thereby showing a responsive need to protect it, has now weakened it against future efforts that can now actively exploit the license with precedence to this allowance which ignores the second clause.

      Tanenbaum SHOULD have been all over this to protect the license.

  10. Management Engine by dohzer · · Score: 1

    For those who wanted to know.

    1. Re: Management Engine by Anonymous Coward · · Score: 0

      Thanks! Here I thought everyone was talking about themselves, bunch of narcissistic selfish bastards.

  11. Actual license requirement text by Bruce+Perens · · Score: 5, Informative

    . Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

    This does indeed require that something shipped with the hardware should say that MINIX is in there. Even if there is no documentation provided.

    The BSD license is the most infringed. Most companies get this wrong. Many of them can tell you why they don't use GPL, and then they infringe on the BSD license, putting themselves in exactly the same place (being a copyright infringer) as if they had used GPL.

    1. Re:Actual license requirement text by Anonymous Coward · · Score: 0

      The BSD license is the most infringed. Most companies get this wrong. Many of them can tell you why they don't use GPL, and then they infringe on the BSD license, putting themselves in exactly the same place (being a copyright infringer) as if they had used GPL.

      Companies don't care if they infringe copyright. They care what the courts will support a potential remedy if they're ever caught. For the BSD, it's at worst requiring attribution + some small payout. For the GPL, it's at worst either releasing source code or suspending all further sales + some small payout; of course, if they're smart enough, by the time the courts actually put an injunction in place they'll have moved on to infringing some BSD code.

    2. Re:Actual license requirement text by eddeye · · Score: 1

      This does indeed require that something shipped with the hardware should say that MINIX is in there. Even if there is no documentation provided.

      Not necessarily. The "and/or" conjunction is a bit sloppy. It indicates flexible interpretation, which can include that notice is only required if at least one of those things is provided (documentation, other materials). If neither are provided with the product, the BSD clause may not be triggered - at least under one reasonable interpretation of the language. The ME portion is not publicly documented, therefore one can argue there is no violation.

      IOW creative lawyering. It wouldn't surprise me if a court went for that, depending on the particulars of the case (how the attorneys behave, how sympathetic their clients are - you know, those things that "blind justice" isn't supposed to consider). Of course the easier fix is just to add a damn notice.

      --
      Democracy is two wolves and a sheep voting on lunch.
    3. Re:Actual license requirement text by Anonymous Coward · · Score: 0

      That's not how legalese works. The text goes "redistribution must reproduce the above copyright notice in the documentation and/or other materials provided..." See the "and/or", it means that the distributer can choose to put the notice on something else that is provided in the distribution. How about the notice is stored inside the chip? That would fit the "other materials" clause IMHO.

      Then the sentence does not say either that the documentation and/or materials HAVE to be provided. If the product is distributed without any documentation or materials, no obligation ensues to do so.

      Finally, the licence does not say anything about layered redistribution. Most motherboards those days are NOT made by Intel. They integrate an Intel chip as part of the components. The documentation that goes with them is the one of the motherboard. Does it also have to comply with the license?

  12. Yes, there is indeed something to see by Bruce+Perens · · Score: 2

    The author of MINIX, Andrew Tannenbaum, wrote a public letter about hearing that MINIX was in the Management Engine. He did not indicate that Intel had any form of special license or had even informed him that MINIX was in the management engine.

    He might not care that he's being infringed, he might not even have figured that out. But it really does look like he's being infringed.

    1. Re:Yes, there is indeed something to see by religionofpeas · · Score: 1

      His name is Tanenbaum.

    2. Re: Yes, there is indeed something to see by Zero__Kelvin · · Score: 1

      He doesn't care who knows his name. Haven't you Hurd? :^)

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    3. Re:Yes, there is indeed something to see by viperidaenz · · Score: 1

      The author doesn't own the copyright, so he wouldn't be the one to grant any additional licenses.

      You can find that would by looking at the copyright notice in the LICENCE file

      License

      Copyright (c) 1987, 1997, 2006, Vrije Universiteit, Amsterdam,
      The Netherlands All rights reserved. Redistribution and use of the MINIX 3
      operating system in source and binary forms, with or without
      modification, are permitted provided that the following conditions are
      met: ....

  13. Re:DON'T FORGET LINUS ALSO STOLE MINIX! by Anonymous Coward · · Score: 0

    He has already admitted to this, decades ago already. Leave the guy alone. Minix is dead. Long live Linux.

  14. Intel destroying itself? by Futurepower(R) · · Score: 5, Informative

    "ME is turning into a colossal dumpster fire."

    Or maybe the equivalent of a billion dollar ad campaign against Intel.

    Customers don't want spyware. It seems that, if Intel continues to try to force spyware on customers, Intel will eventually go bankrupt. That would be a very, very bad conclusion to the very, very bad management by Intel.

    It is EXTREMELY important for the entire world, in my opinion, that Intel stay healthy. (The world needs AMD to stay healthy, also.)

    Did the present Intel managers lack the social ability to understand that providing hidden access for hidden invaders would damage Intel's reputation? Apparently Intel needs a new CEO. Maybe other Intel managers should be replaced, also. Most of the technology development parts of Intel has seemed healthy to me; it's the business management that is failing, apparently.

    The world was told more than 3 years ago about the hidden control: Secret of Intel Management Engine by Igor Skochinsky. (Mar 12, 2014)

    Intel was told that there would be problems: Intel's Management Engine is a security hazard, and users need a way to disable it. (May 8, 2017)

    Did the present managers lack the social ability to understand that it was likely that hackers would find defects in the Intel Management Engine? One article: Intel Patches Major Flaws in the Intel Management Engine. (Nov 22, 2017) Intel's reaction: Intel Management Engine Critical Firmware Update (Intel-SA-00086). (Dec 5, 2017)

    1. Re:Intel destroying itself? by Anonymous Coward · · Score: 0

      Look, you and I are angry, but it's not helpful to live in a fantasy world. Our feelings are not doing any financial or reputational damage to the intel brand. Corporations (intel's biggest customer) demanded Intel implemented this, and clueless consumers (intel's second biggest customer) don't care in the slightest. Intel has been richly rewarded for implementing ME and with AMD implementing similar backdoors what are the geeks (such a small market that it can not be measured) going to do about it?

      Suck it or ditch X86. Those are our options.

    2. Re: Intel destroying itself? by Anonymous Coward · · Score: 0

      And has this too.

    3. Re:Intel destroying itself? by Anonymous Coward · · Score: 0

      lol good luck the spy master race israel has usurped them

    4. Re:Intel destroying itself? by thegarbz · · Score: 0

      Or maybe the equivalent of a billion dollar ad campaign against Intel.

      How so? I see this as a billion dollar advertising campaign FOR Intel. Like it or not we live in a world where the most successful companies are ones where people voluntarily give up their personal information, their personal rights, or (in the case of Amazon) even access to their homes. Why would anyone consider "Intel has {blah blah copyright} over {blah blah feature I don't understand}" negative?

      Intel's major customers don't care, but they are seeing the name a lot. Some of them will even see this as Intel having something that someone else doesn't so it must be good.

    5. Re:Intel destroying itself? by infolation · · Score: 3, Interesting

      The option is open hardware. One of Intel's most vocal anti-ME corporate customers is Google, who are gearing up to replace Intel x86-based servers with the OpenPOWER (IBM Power9) platform in data centres, in part, for this very reason.

  15. FAKE NEWS! by Anonymous Coward · · Score: 0

    He most certainly has NOT done that. Fake news.

    1. Re:FAKE NEWS! by Anonymous Coward · · Score: 2, Informative
  16. sad by Anonymous Coward · · Score: 0

    bsd, unlike boost requires attribution. that's literally all it requires, and they can't do that?

  17. Independent Licenses by Anonymous Coward · · Score: 0

    People forget that the software author can always privately license software under whatever terms they like. The likelihood of a company like Intel improperly licensing a piece of software is highly unlikely when more likely is that they obtained a license allowing them to do with it what they want.

    If I or anyone else publishes a work of open source software, we can always negotiate a different license with a company or individual to suit their purposes.

    This isn't unlike the people who freak out when a company has a piece of software they've licensed as open source, but charge for it, then don't have the source freely available - because people think the GPL requires source to be given away when it doesn't. The source must only be made available at reasonable distribution/copying costs when the binaries are distributed. If I want to charge a million dollars for a piece of open-source software I've written, I don't have to give away the source to anyone except the person who bought a license to the software, but a different license can always be negotiated.

    1. Re:Independent Licenses by Anonymous Coward · · Score: 0

      Firstly, Intel has a long history of copyright and patent infringement. Standard business procedure for companies like this is to agree to a license deal only AFTER they have been sued. Secondly, the author has made it quite clear that intel does not have a special license. He was not even aware that Intel was using his IP.

    2. Re:Independent Licenses by viperidaenz · · Score: 2

      Correction, the author has made it sort of clear he has not explicitly given Intel a license. He did say they talked about licensing.
      What is clear though, is the author in question has no right to give out any license. The copyright holder is the university he works at, not him. There has been no statement from the university.

  18. Alternate Licenses by neovoxx · · Score: 1, Interesting

    People forget that the software author can always privately license software under whatever terms they like. The likelihood of a company like Intel improperly licensing a piece of software is highly unlikely when more likely is that they obtained a license allowing them to do with it what they want.

    If I or anyone else publishes a work of open source software, we can always negotiate a different license with a company or individual to suit their purposes.

    This isn't unlike the people who freak out when a company has a piece of software they've licensed as open source, but charge for it, then don't have the source freely available - because people think the GPL requires source to be given away when it doesn't. The source must only be made available at reasonable distribution/copying costs when the binaries are distributed. If I want to charge a million dollars for a piece of open-source software I've written, I don't have to give away the source to anyone except the person who bought a license to the software, but a different license can always be negotiated.

    --
    0x68ADA2CC
    1. Re:Alternate Licenses by Anonymous Coward · · Score: 0

      Nope - Tanenbaum said that Intel didn't contact him at all. So Intel simply 'stole' his code and distributed it.

    2. Re:Alternate Licenses by skiminki · · Score: 1

      Based on the git log of Minix, there are multiple people contributing patches. I would think you'd need to get a contract with more or less every contributor that shows up in the "git blame" of the used release.

      It would be very cool (although unlikely) if Intel etched the license in one of the metal layers of the CPU.

    3. Re:Alternate Licenses by Anonymous Coward · · Score: 0

      Maybe that is why Intel used a very old version, that was only intended as a demonstration. The main author also indicates that the newer versions are designed for efficiency, not for maximum security.

  19. The license probably is there by jbrase · · Score: 1

    I'm willing to bet that if you can actually get a shell into the management engine Minix instance, and browse to /usr/share/doc or wherever, the license probably actually is in fact there, so the letter of the license is almost certainly fulfilled (because the license is going to be in the upstream distribution of Minix, and it would be extra work *and* would invite legal trouble for Intel to remove it, so why bother?), even if the spirit is violated.

  20. Minix is under a BSD license by Antique+Geekmeister · · Score: 2

    You're quite correct. The Minix license is visible at https://github.com/minix3/mini... .

    I'm not convinced BSD is the most infringed license, but you seem correct that infringing it is common place. One reason difficulty is that the BSD license does not have the clear consequences that GPL violation does, that violation loses access to all other GPL licenses from the same copyright owner. The Free Software Foundation has been using this successfully to enforce GPL compliance.

    1. Re:Minix is under a BSD license by AmiMoJo · · Score: 1

      I always thought it would be even better if the GPL cancelled the violator's right to ALL other GPL software, but I guess there probably isn't an international legal basis for that.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    2. Re:Minix is under a BSD license by The+Evil+Atheist · · Score: 1

      There's a common sense basis for that. The GPL isn't an organization or a collective. It's just a licence. A licence, regardless of which country's laws, or international law, cannot forbid the use of other things having the same licence. That would be a ridiculous ability for a licence to have.

      Such a thing would also work against the GPL more than help it. What if someone was infringing on one GPL project, but then was a very good contributor to another unrelated project? That other GPL project would suffer for no fault of their own. No one would adopt the GPL in that case, and no one is protected.

      --
      Those who do not learn from commit history are doomed to regress it.
    3. Re:Minix is under a BSD license by Kjella · · Score: 1

      A licence, regardless of which country's laws, or international law, cannot forbid the use of other things having the same licence. That would be a ridiculous ability for a licence to have.

      A license can obviously only retract rights to the same work it grants rights for. But the conditions for that can very well be external to the work, for example you can look at the patent retaliation clause in the Apache license which pretty much says if you sue anyone for violating any other patent infringed by this work, then all your patent licenses are terminated. As such it would be entirely possible to write a license where any other GPL violation would terminate this license. Now if that was a standard clause, all your licenses would terminate at once and you'd have no right to use any GPL code.

      Another variation that would achieve the same thing is to create a license where you're always contributing code to a single virtual work and say that violating the license for any part of the work terminates all rights to the entire work. That would essentially be the same logic used to terminate access to an entire work for violating a part of it today, only supercharged. So legally it's possible but yes, it would be a form of doomsday weapon which might scare away a lot of potential contributors.

      --
      Live today, because you never know what tomorrow brings
    4. Re:Minix is under a BSD license by Antique+Geekmeister · · Score: 1

      Organizations with large suites of GPL licenses, such as the Free Software Foundation, are in a similar position to companies with large suites of software patents. If the licenses on one tool are violated outrageously, then the license for all components owned by that copyright holder can be withdrawn en masse. That would be a deliberate choice by the FSF. I will note that the FSF has always been _very_ careful about enforcing the GPL judiciously. Violators get every opportunity to comply voluntarily long before any penalties are sought. The FSF does not threaten copyright violators lightly.

      As best I can tell, with Intel ME, they've done to Minix what TIVO did. They used "free software" to build an OS that cannot be modified or updated by the owner of the hardware.

    5. Re:Minix is under a BSD license by The+Evil+Atheist · · Score: 1

      GPL is not the FSF. Most GPL software is not owned by the FSF and so whatever the FSF decides to do does not apply to GPL in general. Furthermore, the FSF cannot do what is out of the licence's scope. The GPL is its own thing that the FSF itself must obey.

      --
      Those who do not learn from commit history are doomed to regress it.
    6. Re:Minix is under a BSD license by Antique+Geekmeister · · Score: 1

      You've made valid claims. But I fail to see where they would refute my points. The Free Software Foundation _wrote_ the GPL, and has the largest collection of GPL copyrights that I've seen, anywhere. It particularly hods copyrights to gcc, glibc, coreutils, and other critical freeware, so they are the best example of a a GPL copyright holder with multiple copyrights.

      Moreover, the FSF has been the organization bringing GPL violations to court. They've been successfully setting legal precedents in cases including Tivo and Cisco. They've also been providing invaluable legal support to the current VMware lawsuit.. To say that such action and the resulting precedents do apply to the GPL in general, merely because the FSF does not hold a majority of GPL copyrights, would be misleading.

    7. Re:Minix is under a BSD license by The+Evil+Atheist · · Score: 1

      The Free Software Foundation _wrote_ the GPL

      So what? That does not mean they have any control over any software merely because they are also GPL. In fact, the FSF has strict rules about what they let IN to be placed under the FSF umbrella.

      so they are the best example of a a GPL copyright holder with multiple copyrights

      Again, so what? You are talking about the FSF. I am talking about the GPL itself. Stop treating them as if they're the same.

      The licence itself does not allow the FSF to withdraw copyrights from any entity for all other GPLd projects, not even the ones they own.

      --
      Those who do not learn from commit history are doomed to regress it.
  21. Now we're supposed to care? by quonset · · Score: 0

    So copyright infringement is a bad thing now? Funny how when people brag about all the programs and movies they've "pirated", all of which have explicit copyright information, the opinion is, "Fuck 'em" or , "it's not enforceable" or any number of reasons why taking someone's elses ones and zeros isn't an issue. But now, because it's "free" software with copyright information, suddenly it's an issue.

    If you're going to claim taking someone elses work without payment or attribution which has copyright information isn't a big deal, then neither is this.

    1. Re:Now we're supposed to care? by Anonymous Coward · · Score: 1

      My counter argument is what you said, just the other way around.

      So copyright infringement is a good thing now? Funny how when corporations whine about all the programs and movies people "pirated" yadda yadda yadda.

      Thing is whenever someone "steals" a $15 movie, damages in the thousands are claimed. When Intel makes billions using "stolen" minix... hey let's not nitpick.

    2. Re:Now we're supposed to care? by Anonymous Coward · · Score: 0

      You are comparing to individual private use - commonly complained about by large corporations as copyright infringement, or in their words "theft", this incident is taking someone else's software and then selling it an profiting from it... no one disputes that's immoral and illegal for video pirates, even the frickin video pirates wouldn't deny that, not that anyone does that anymore. The problem here though is merely attribution, "have my free software and make money from it in your product, but give me frickin attribution pls", I mean come one this isn't someone watching a free video and forgetting to 1up the author, this is someone putting a lot of time and effort in assimilating someone elses software for their companies benefit and then not bothering to mention the original authors and license, that's negligent and disrespectful, it cost NOTHING.

  22. SCO could make them care... by Anonymous Coward · · Score: 0

    Remember SCO? They stupidly sued because they thought they could prove Linux came from Minix. Minix has a tiny tiny amount of murky header sharing and ancestry with BSD Unix in a way that they might actually have a hope.

  23. What is needed is for both of them to die. by Anonymous Coward · · Score: 0

    Horribly.

    Once Wintel is out of the way (AMD Included!) there will be room in the market for competition as software has to be compiled for multiple cpu architectures, instead of just being x86/x86_64, and maybe if you are really lucky, for some ARM variant.

    Furthermore if x86 dies, there will now be room for both a new bios/firmware/boot environment as well as new cross-platform operating systems.

    Sure it could all go to hell again, but this would be the first step towards leaving that opening available... sort of like the opening Intel, AMD, and ARM vendors are leaving open into all of our 10 year old pieces of hardware, or in the case of cell phones 15-20+ year old ones.

    1. Re:What is needed is for both of them to die. by Hal_Porter · · Score: 1

      Furthermore if x86 dies, there will now be room for both a new bios/firmware/boot environment as well as new cross-platform operating systems.

      The way things are going that would be UEFI. Which is, you know, mostly locked down on non Intel platforms. Especially ARM ones -

      https://www.extremetech.com/co...

      If you haven't been following this fracas since it first started to emerge last year, it's all to do with UEFI - a long overdue replacement for BIOS - and a feature called Secure Boot. In essence, Secure Boot stops a computer from loading an operating system that hasn't been signed by the publisher (in this case, Microsoft or an OEM), and its signature added to the computer's firmware. On an x86 Windows 8 computer, you'll be able to sign your own operating systems (custom builds for Linux, for example), or disable Secure Boot entirely. On Windows 8 ARM computers, neither of these options will be available: You'll have official builds of Windows 8, and that's it.

      --
      echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
    2. Re:What is needed is for both of them to die. by TheReaperD · · Score: 1

      Though PC monoculture is a very bad thing, so is too much variance. No one wants a computing world where you can't get more that 25% of software to run on any particular platform so you may need multiple PCs just to use all of the software titles you want to use. This is a minor problem with video game consoles today (I'm looking at you, "console exclusives"!) but, back when there were many more, there was no way to play all the games you wanted to play on a single system as the titles were just not available.

      --
      "Be particularly skeptical when presented with evidence confirming what you already believe." -
    3. Re: What is needed is for both of them to die. by Zero__Kelvin · · Score: 1

      The locking down on ARM has nothing to do with any limitations of UEFI on ARM. It was a move by Microsoft ... a choice to remove choice ... because they knew they could get away with it. They can do it on x86 just as easily from a technical perspective and many of us expect them to in the not too distant future if they think they can get away with it.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    4. Re:What is needed is for both of them to die. by Anne+Thwacks · · Score: 1
      No one wants a computing world where you can't get more that 25% of cars from the same manufacturer.

      FTFY

      In the real world: where there are multiple architectures, you could reasonably expect people to write most software in high level languages, in a portable way.

      Alternatively, the communists like you will take over, and we will all drive Trabants.

      --
      Sent from my ASR33 using ASCII
    5. Re: What is needed is for both of them to die. by Hal_Porter · · Score: 1

      My point is that getting rid of x86 and the Bios doesn't necessarily mean a more competitive environment and open platforms.

      Indeed the PC was only open because IBM used off the counter parts, documented the Bios and lost lawsuits against cloned hardware and clean room Bioses. That allowed other vendors to build clones.

      And also that the notion of cryptographically signing OS loaders hadn't been invented then, which allowed Linux to run on hardware that was more or less optimized to run Windows.

      --
      echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
    6. Re: What is needed is for both of them to die. by Zero__Kelvin · · Score: 1

      Hardware wasn't optimized to run Windows. That is ridiculous. I would agree with the other stuff you said of course, but keeping x86 / UEFI doesn't encourage lockdown either. The point is lockdown is a function of marketing and politics that leverages consumer ignorance, and is not tied to any processor.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    7. Re: What is needed is for both of them to die. by Anonymous Coward · · Score: 0

      Hardware wasn't optimized to run Windows. That is ridiculous.

      Since windows was (and still is) the dominant platform 89% today (per netmarketshare), and much higher in the not to distant past, what else would consumer hardware manufacturers design and optimize for?

      Most consumer PC hardware sold is installed in machines intended to run windows. Most consumer benchmarks are performed under windows. Most driver development is done to optimize performance (as defined by those benchmarks) under windows. Quite a few BIOS updates are released to optimize performance (as defined by those benchmarks) under windows. I think it's fair to say that most consumer PC hardware design decisions are made with windows in mind.

      Is it fair to say that consumer PC hardware is optimized for windows? Well, I think it's fair to say that it is more optimized for windows than anything else.

    8. Re: What is needed is for both of them to die. by Zero__Kelvin · · Score: 1

      You are clearly one of those easily confused people who didn't notice when Microsoft starting trying to make it the hardware's fault when they didn't support it properly. "Do ARM processors support Windows?" News Flash: There is no processor technology that supports a particular OS. Originally VAX was designed so that VMS could support virtual addressing in hardware, but there is nothing, and I mean NOTHING about Windows that is innovative, or that Intel considered when designing their processors. They have processor technologies the OS is free to leverage, not techniques that leverage software. Saying they "support Windows" better is stupid, and ignores the fact that Linux, the BSDs, and MacOS are far superior systems.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    9. Re: What is needed is for both of them to die. by Hal_Porter · · Score: 1

      Well it was optimized for Windows in the sense that 90% of desktops ran Windows and the OEMs pre-installed it. So it made sense for OEMs to make sure Windows ran well, even if other OSs didn't.

      E.g. look at Winmodems. They were cheap and worked in Windows, but didn't work under Linux. OEMs did care about Windows and reducing costs but they didn't care about other OSs. So you got Winmodems.

      And in a sense Secure Boot UEFI might well be the same thing. Microsoft require it for Windows. It's at the very least inconvenient for other OSs, even on x86.

      --
      echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
    10. Re:What is needed is for both of them to die. by Anonymous Coward · · Score: 0

      Long overdue replacement for BIOS? Why is it that you think BIOS needs a replacement? It's literally supposed to be Basic(Input Output System) and nothing more. It allows the machine to have some minor functionality before you load any more programs. It does not need more than that.

    11. Re: What is needed is for both of them to die. by Zero__Kelvin · · Score: 1

      "So it made sense for OEMs to make sure Windows ran well, even if other OSs didn't."

      This had nothing to do with the hardware "running well" and is strictly about drivers (software.) Secure boot is an optional UEFI module. You can have UEFI without secure boot. Also, UEFI is software, not hardware. It offers the same features for Linux as Windows, and there are Linux distributions that support it. Winmodems were "Windows Only" because of lack of documentation and drivers; there was nothing about the hardware that made it work better with Windows than any other OS. In every case it was about getting software to support the hardware. At no time did a hardware engineer say "hey, we should do it this way so Windows works better" because, again, software supports hardware (or not), not the other way around.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    12. Re: What is needed is for both of them to die. by Anonymous Coward · · Score: 0

      Just to add some colour to this thread. I agree with your sentiment, but it comes apart slightly once standards become involved. Consider the following (not too uncommon) scenario:

      *Hardware is implemented.

      *Software is written to support the hardware.

      *The hardware becomes a standard.

      *New hardware is created to match the standard but doesn't quite get it right.

      *The software vendor refuses to change from the standard implementation.

      Now we have a case of "hardware not supporting software".

    13. Re: What is needed is for both of them to die. by Zero__Kelvin · · Score: 1

      Nope. That's still software not supporting the hardware. There is no end run around it.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    14. Re:What is needed is for both of them to die. by Anonymous Coward · · Score: 0

      Sure it could all go to hell again
      It *would* go to hell again.

      ARM is currently basically the most shipped CPU ever. That thing is everywhere. How many of those ARM platforms are 'open'. Not many. In fact very few of them are.

      15-20+ year old ones
      Try more along the lines of any model that has come out in the past year.

      Do you think qualcomm or broadcomm will be willing to come off their equivalents to ME? Do you think Verizon AT&T will let it happen?

    15. Re: What is needed is for both of them to die. by Anonymous Coward · · Score: 0

      This.

    16. Re: What is needed is for both of them to die. by Brockmire · · Score: 1

      When you start to add raid cards and it fails to boot, the bios usually gets blamed due to some lack of memory from something old. OP rom or some such?

  24. Can anyone prove they didn't include notices? by Phil+Hands · · Score: 1

    Intel do have lawyers, and free software folk that understand licensing.

    I'm sure they are capable of working out that all they need to do to be in compliance is to include the copyright notice somewhere in the binary blob that is ME.

    Has anyone actually been in a position to check if they did that or not?

    If not, I suspect that this is a non-story.

    Also, even if AST were upset enough to sue (which does not appear to be the case), I don't suppose it would cost much to shut him up.

    Are there any other copyright holders with standing here? (Minix used to be a one-person thing, but perhaps he's been accepting diverse contributions since relaxing the license). Even so, if they did include some sort of copyright notice, there's nothing for other copyright holders to say either.

    --

    Debian: GNU/Linux done the Linux way
    1. Re:Can anyone prove they didn't include notices? by Anonymous Coward · · Score: 0

      The notice is going to be in those manuals (in the appendix) or on a sheet of paper in the box.

      To think that Intel is not doing what they need to do to protect themselves is sheer linux fanboi bullshit. Everyone thinks the GPL is magically the slayer of all evil.. not that the stoopid mouth breathers never acutally READ the documentation that come with the hardware.

      Fucking neckbeards.

    2. Re:Can anyone prove they didn't include notices? by Anonymous Coward · · Score: 0

      I'm sure they are capable of working out that all they need to do to be in compliance is to include the copyright notice somewhere in the binary blob that is ME.

      Where Intel failed is the following:

      and the following disclaimer in the documentation and/or other materials provided with the distribution.

      So if there's no such disclaimer then they're not complying with the terms of the license, at least as far their retail SKUs are concerned.

    3. Re:Can anyone prove they didn't include notices? by viperidaenz · · Score: 1

      There is no documentation provided for the ME.
      The code isn't distributed with Intel CPU's

    4. Re:Can anyone prove they didn't include notices? by Anonymous Coward · · Score: 0

      I'm pretty sure putting the notice inside the binary blob would not pass muster in court. To be legal it probably need to be printed somewhere the typical customer would see it. On the box, on a user manual / addendum in the box, or possibly a BIOS post message when the machine is powered on. Of course who's to say they aren't displaying a very brief POST message? With the power management in monitors these days and the fact they take some time to detect the resolution being sent to them before they display anything, any number of POST messages could be displayed in this time period. I remember an example of an old video card I back in the day that briefly before any BIOS POST messages were displayed it would flash a quick blurb about the model of card and bios version. This was never seen on energy star compliant monitors of the day. It wasn't until I had plugged an old school IBM monitor from probably some time in the 80's into it to test the monitor that I ever saw this message since those old monitors stayed on all the time unless you actually switched them off.

  25. Intel should fund MINIX 3 by Anonymous Coward · · Score: 1

    The least Intel could do is dropping some sort funding on the MINIX 3 project.

    1. Re:Intel should fund MINIX 3 by viperidaenz · · Score: 1

      Who said they didn't provide compensation to the university in exchange for an NDA?
      The university that owns the copyright on minix has several Intel based supercomputers.

  26. Is a point being missed? by Anonymous Coward · · Score: 0

    This could be the legal lever to force intel to provide a wipe to disable this backdoor.

  27. What if he's talking self-fulfilling prophesies? by Anonymous Coward · · Score: 0

    "Is there any other way in which we could screw over our customers?" "I can't think of anything, but maybe Stallman came up with something in the meantime?" -- Later -- "Oh God no, who would stand for that?" "Well, if Stallman is against it, people will likely accept it."

  28. Intel ME/AMT pwned by buffer overflow by Anonymous Coward · · Score: 0

    See subject: It's BIGGEST problem (other than a blank logon string issue) Intel AMT/ME has & it's unpatchable http://www.theregister.co.uk/2017/12/06/intel_management_engine_pwned_by_buffer_overflow/

    APK

    P.S.=> I know how to make it totally harmless via port filtering on a router EXTERNAL to the motherboard though so no big deal https://it.slashdot.org/comments.pl?sid=11425437&cid=55656927/ ... apk

    1. Re:Intel ME/AMT pwned by buffer overflow by Anonymous Coward · · Score: 0

      I would call you a genius if you can use the buffer overflow to patch IME and disable it permanently. Either that or thru the USB exploit to clear that ME in BIOS/UEFI.

    2. Re: Intel ME/AMT pwned by buffer overflow by Anonymous Coward · · Score: 0

      Wow, look at that. APK touting Khyber's USE A FUCKING EXTERNAL ROUTER method.

      Goes to show APK's HOSTs file is shit.

  29. Shareholders should sue Intel for wasting money by Anonymous Coward · · Score: 0

    Intel sends resources (money) on developing a feature that makes chips more expensive to produce. The feature is not documented, there's no gain for the user, its not helping in any way to sell more CPUs. i.e., money spent for nothing. This reduces the value of the shares unnecessarily.

    Shareholders should sue Intel.

    Corporations have no right to waste money in any way they please without keeping the owners informed.

  30. Re: DON'T FORGET LINUS ALSO STOLE MINIX! by Zero__Kelvin · · Score: 1

    You should have logged in. You could have won the internet in the "Most Stupid and Misinformed Post" category. Hint: Tanenbaum argued that Linux should take the Minix / Microkernel approach which Linux rejected in favor of a monolithic approach.

    --
    Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
  31. Re:Year of the desktop? by scsirob · · Score: 1

    So.. What you are essentially saying that the Year of the Linux/Minix desktop started decades ago??

    --
    To Terminate, or not to Terminate, that's the question - SCSIROB
  32. The IT department does not seem to care... by Anonymous Coward · · Score: 0

    For servers that's fine, since that's a more educated audience. For laptops which go towards a wider audience, ME needs to be OFF in every sense of the word. Corporate customers can turn it on as needed.

  33. Cross-architecture testing is expensive by tepples · · Score: 1

    where there are multiple architectures, you could reasonably expect people to write most software in high level languages, in a portable way.

    It costs money to support multiple architectures and multiple operating systems. Even though cross-compilation is possible, cross-testing is a bit more expensive, as it's not quite as practical to judge user interface responsiveness when you're relying on remote access to a leased VPS of the appropriate architecture through RDP, VNC, X11, GoToMyPC, LogMeIn, or the like. If a smaller company hasn't yet ramped up its collection of target hardware on which to test, end users will end up seeing notices like this on its applications:

    x86-64: Buy Now
    MIPS64: Sign Up to be notified when we expand to your architecture.
    AArch64: Sign Up to be notified when we expand to your architecture.
    RISC-V: Sign Up to be notified when we expand to your architecture.

  34. Nah, rich Intel will pay the fine. by Anonymous Coward · · Score: 0

    I will hide Intel (c) in their products.

  35. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  36. Now we're supposed to buy? by Anonymous Coward · · Score: 0

    Counter-counter argument: "I never would have bought it anyway". Works for pirates. Works for Intel.

  37. Of course in the USA, everyone can lose by theendlessnow · · Score: 1

    I wonder if the folks that determine MInix was in it could face federal prosecution for DMCA.

    Sometimes it's not about right or wrong, but about how deep the pockets go.

  38. Prison for not disclosing Intel vulnerabilities? by Futurepower(R) · · Score: 3, Interesting

    Replies to:
    "Our feelings are not doing any financial or reputational damage to the Intel brand."
    and to:
    "... what are the geeks (such a small market that it can not be measured) going to do about it?"

    It is common, I've observed, that technically-knowledgeable people believe they should not get involved with social issues. In fact, however, they have discussions like this one and have a huge amount of power.

    What are the legal issues? Can you recommend Intel or AMD hardware without telling the managers of your company or your customers that the hardware is not secure? Could you go to prison for knowingly selling insecure hardware without informing the customers in a way that causes them to fully understand? Suppose a company loses millions of dollars because Intel hardware you recommended was found to be hackable, especially since that kind of vulnerability has already happened. Can you be found liable?

    "Intel has been richly rewarded for implementing ME and with AMD implementing similar backdoors..."

    Intel SHOULD be "richly rewarded" for that. "Implementing ME" was a good idea. The issue is that was done in a way that Intel has kept hidden, and in a way that customers who don't need that feature are not allowed to understand and cannot control.

    It seems to me that the business side of Intel is not being managed well. What I know about Intel management is from talking with Intel employees, sometimes at conventions, sometimes at social events not connected with technology, visiting an Intel campus during an open house event, and from news stories.

    Here is one example of what I have learned, from a 2013 news story:

    Intel has been emitting fluoride for years without state knowledge, permit. (Sept. 24, 2013)

    Quote from that story: "When Intel applied for D1X approval, the company considered its fluoride emissions insignificant and did not include those. It was only when the company applied for the new DEQ permit required by greenhouse gas regulations that it [Intel] requested a 6.4-tons-per-year fluoride emission limit."

    Intel is putting 6.4 TONS EACH YEAR of fluoride compounds into the air around its plant! Does that seem to you to be good business management?

    My understanding is that there are many areas of bad business management at Intel. The central technological group, however, seems to me to be well-managed. For example, in recent years Intel has released CPUs that provide the same computational power, but lower the electrical energy required. That achievement is good for all humans on the planet.

  39. I'm passing that suggestion on to Tanenbaum by raymorris · · Score: 1

    You may be right. Tanenbaum or others at the University may be able to subpeona the code. I'm sending him a link to your post.

  40. Disable all MEs? by EagleRider70 · · Score: 1

    This seems like a great tool to use to force Intel to disable all the MEs out there. Since we know this is a very large security hole, at least with processors based on and newer than Sandy Bridge, it seems the right thing for Minix3 to do.

  41. Re:Stop with the evil ME claims! by Anonymous Coward · · Score: 0

    99% of end users of intel CPUs do NOT want it. Now that they are beginning to realise what has been forced upon the.. the market will become ripe for the picking if they don't address the issue of ME being mandatory for the average user.

  42. Metabyte vs Nvidia and others by raymorris · · Score: 1

    In general, anyone who was harmed by an unlawful act can sue. The plaintiff would show that:
    1) The defendant did an unlawful act (including torts such as negligence)
    And
    2) That unlawful act caused harm to the plaintiff

    In Megabyte vs Nvidia, the copyright infringement may have constituted unfair competition or unfair trade practices under state law. The court ruled that *if certain specific conditions are met*, the federal Copyright Act preempts state common law and the plaintiffs did not prevail.

    So while *in general* anyone harmed by unlawful conduct has standing to sue, the Copyright Act specifically limits that, under certain conditions. There's not a clear, bright-line answer to these general types of cases.

    Separately, *criminal* copyright infringement can be charged by a federal prosecutor. Criminal infringement is defined as:

    infringes a copyright willfully and for purposes of commercial advantage or private financial gain ...valued at over $2,500

    Millions of copies of Minix is more than $2,500 of value, so if Intel was willfull in their infringement they are guilty of criminal copyright infringement.

  43. An offer they couldn't refuse by DCFusor · · Score: 1

    Intel isn't often this stupid. I propose an alternate explanation - NSL by the TLA's demanded they add this backdoor. And can't talk about it. We know this happens to other firms. Occam's razor.

    --
    Why guess when you can know? Measure!
  44. Minix creator Tanenbaum replied to my email by raymorris · · Score: 1

    Andrew Tanenbaum replied to me / us 20 minutes after I sent him a link to your post. He figures Intel would be will to spend millions fighting a subpeona, so it's not worth it. :(

    1. Re: Minix creator Tanenbaum replied to my email by Anonymous Coward · · Score: 0

      There are more copyright holders! Minix does not provide the webserver, nor the wireless code (wpa_supplicant). Any of these could also ask for damages or injunctions. http://blog.ptsecurity.com/2017/12/huffman-tables-intel-me.html?m=1

    2. Re:Minix creator Tanenbaum replied to my email by Anonymous Coward · · Score: 0

      There may be groups willing to spend millions to serve that subpeona. This affects like most of the computing universe. You think that privacy has no allies, or Intel has no enemies?

  45. Missed on a really serious subject by Anonymous Coward · · Score: 0

    I see this differently.

    For the Copyright, the first things that matter here are:
    1) What the copyright says (You have to put the copyright string in the binary file)
    2) What Intel did (They probably did, and even though they are not required to do so, they may have also provided a way to display it.)
    3) Possibly what the author wants to do. (In the unlikely event that Intel didn't, then he might be a Billionaire and Intel hits a speed bump.)

    I don't know of any university that would not like to have an extra $Billion. If Vrije Universiteit, Amsterdam thought they had a case they would go for it. The fact that they haven't says there is unlikely to be much truth to copyright violation claims here.

    That said, I applaud the noble effort to try to find some leverage to get Intel to clean up their ME engine story.
    This as a terrible, short sighted security plan that our computing critical infrastructure depends on.
    It seems criminal and really dumb on their part.
    It exposes them to amazing liability.
    Sadly,even if Intel totally ignored the copyright rules, I don't see a copyright violation as leverage to help this.

    Instead of asking about copyrights, it might be more interesting to figure out why Intel wants this stuff closed?
    A Tin Foil Hat might say the TLA's like it.
    Intel might say it is to protect their wonderful Intellectual property.
    The gadget they build has a complicated set of constraints. (Performance, compatibility, market.)
    I suspect that making a stable CPU is hard to do and you are probably always forced to ship with compromises.
    Compromises you would rather not disclose unless you have to.
    The ME gives them a nice hiding spot for that.
    If their silicon has bugs and the ME allows them to patch around them, then do they have to disclose the bugs to their customers?

    Given that Intel has the single thread performance, what to do?
    Give up some of the constraints. (Compatibility with everything and market requirement for speed over everything.)
    If somebody has a real plan for how to build new simple but fast cpu, I'd bet that Google, Facebook, and Amazon would find a way to get it done.

  46. $750 per copy up to $150,000 per *work*. by raymorris · · Score: 1

    There is a range, but basically $750 per copy, up to $150,000 per work. So Intel owes Tanenbaum $150,000, or whatever damages he can prove.

  47. the jews where forced to wear Pieces Of Flair by Joe_Dragon · · Score: 1

    the jews where forced to wear Pieces Of Flair

    1. Re: the jews where forced to wear Pieces Of Flair by Anonymous Coward · · Score: 0

      I thought only the Gays got the flair? Everyone else had shitty cloth badges and things.

  48. Stay healthy? Management ensured it never was. by Anonymous Coward · · Score: 0

    Stay healthy? Management ensured it never was.

    Read Intel's history!

  49. Linus Torvalds was approached for this by Anonymous Coward · · Score: 0

    This might be related to something I noticed in a video of Linus at a keynote speech where he was asked if he ever was asked by the NSA to install a backdoor into Linux. He responded, "No" while nodding yes. It makes me wonder if he refused to allow Intel to incorporate Linux into Intel ME so Intel had to go with Minix instead. And, Intel/NSA learned their lesson the second time by keeping the author in the dark about their real purpose. Which is why the author of Minix was surprised when he learned every Intel chip in the world contained his operating system.

  50. Campaign for which competitor by DrYak · · Score: 1

    "ME is turning into a colossal dumpster fire."
    Or maybe the equivalent of a billion dollar ad campaign against Intel.

    Yeah, but in favor of whom ?

    Look the other giant desktop/workstation/server CPUs maker :
    AMD.
    Since the curent Zen generation (and in laptop APU, since the previous generation, too) they have AMD PSP : an ARM core, which has few useful uses (storing keys like TPM, can be used to encrypt RAM transparentrly to avoid VMs trying to hack each other, etc.) but is a closed signed blob that can't be audited and has full RAM and bus access.
    (at least luckily, unlike Intel ME/AMT it doesn't listen on the network by default, doesn't handle firmware flashing, and doesn't keep working even when the CPU is powered off. These "light-out management" functionnality are usually handled by dedicated IPMI chips on server hardware - which luckily listens on a separate network).
    Though it seems that, in the light of the Intel ME scandals, AMD are trying to provide ways to make the PSP stop communicate with the outside once the system has initialised.

    Take a step further back and at other giant CPU manufacturer :
    Qualcomm, the top maker of smartphone ARM SoCs.

    Situation is even worse. On their socs, to make thing a tiny bit cheaper and a few functionnality easier, the baseband modem is integrated into the main SoC. And is in charge of tons of low-level functionnality - Init, RAM, etc. (basically, the modem serves as the chipset's northbridge).
    The problem, is that for legal reason it cannot run arbitrary code (because it communicates over special radio frequencies that aren't open but licensed, unlike the usual 2.4Ghz used by Wifi/BT/etc). The baseband modem can only legally run code (enforced by signatures checks) that is written by people holding the necessary license to emit stuff on the restricted frequencies used by 3G/4G.
    So only telco service providers and chipsets manufacturer can send code (with OTA) to the northbridge of your smartphone to run.

    That's why projects like Purism's Librem 5 have to resort to underpowered unusual chips like Freescale 6mx / 8mx. That's about the largest popular manufacturer from which they can get SoC that don't require running any proprietary blob.

    There's litteraly no huge big CPU manufacturer where you can avoid blobs at very frightening access levels to RAM.

    But hey, at least all the above blobs are successfully used to handle DRM and thus online streaming works flawlessly. And all the clueless users are happy about their internet-TV working out of the box.

    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
  51. found it by Anonymous Coward · · Score: 0

    # cat /usr/share/doc/LICENSE
    Fuck You!!!
    All your base are belong to us.
    We can and will do whatever the fuck we want.
    Fuck You!!!
    # echo $?
    0
    #

  52. Where'd Khyber note port filtering vs. this? by Anonymous Coward · · Score: 0

    Where'd Khyber note port filtering vs. this? I did for MONTHS now (after the person 'spamming it' (which I didnt' consider it that him warning us of Intel AMT/ME as much as he did - got me looking into it & this fix? WORKS!)) - see subject & show us that BEFORE I ever posted it - you can't.

    FACT: Khyber's a mental case & hasn't done squat of note in the art & science of computing! Yes, I know it's YOU Khyber...

    * Even Marcus Hutchins' (?) that's also in trouble for allegedly writing some botnet "magic bit" won't fix this problem Intel AMT/ME has!

    My method, does.

    APK

    P.S.=> Khyber's welcome to show he posted it before I can show I did & he NEVER ever noted port filtering that I've ever seen & as far as my hosts file being 'shit'? Well, too many on /. say different from a VERY PARTIAL LIST only (& I can produce many MANY more like these) https://slashdot.org/comments.pl?sid=11420419&cid=55704671/ & I never said it cured all (nothing does - just that hosts do MORE for FAR LESS overall vs. anything else, natively) + I created it myself (did Khyber create a router or modem himself? Hell no)... apk

    1. Re:Where'd Khyber note port filtering vs. this? by Khyber · · Score: 1

      Jeeze, here I am on vacation and I get a notification from a friend that I'm being discussed on /.

      And look, it's Alexander the fucking coward "Pussy" (that's what the P stands for) Kowalsky, the mentally-retarded that thinks any AC is either me or Creimer or someone else.

      Too fucking stupid to know that plenty of *properly-educated* people type and speak just like I do.

      And I've been saying use a router FOR YEARS ON THIS SITE, since it was revealed that the OS and some programs bypass HOSTs AT WILL, oh but suddenly you won't go back and post any of those links to the arguments, because that would MAKE YOU WRONG AND A LIAR, yet usually you're already set with links to everything else - hmmm. Isn't that suspicious? Your behavior is pretty fucking obvious, shitstain.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
  53. You Wouldn't Download A CPU by Anonymous Coward · · Score: 0

    Fuck you, I would if I could.

  54. Hang on, clarification needed. by Hognoxious · · Score: 1

    Can somebody confirm or deny: Intel's built in spy/nanny system - all that keeps the free world safe from terrusts and peejafiddlers and cormanausts - is cribbed from a classroom exercise that became a joke that got out of hand before they could stop it.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  55. Re:Stop with the evil ME claims! by viperidaenz · · Score: 1

    Do 99% of the users not want their CPU to boot?
    The management engine does more than just remote management. It manages the entire system. from first boot process to power management.

  56. Silver lining. by Anonymous Coward · · Score: 0

    Because Intel ME allows a comp to be hijacked without defense and with no trace, all accusations of piracy are now suspect.

    1. Re:Silver lining. by Anonymous Coward · · Score: 0

      Because Intel ME allows a comp to be hijacked without defense and with no trace, all accusations of piracy are now suspect.

      That's not gonna fly in court, AC. Even in a criminal infringement case, pointing out that someone could have framed you by hacking IME isn't going to introduce reasonable doubt, and in civil cases, the standard of proof is less stringent.

  57. That's what I'm thinking. Call EFF by raymorris · · Score: 1

    That's what I was thinking. EFF and others would support it. Tanenbaum doesn't seem to be interested, unfortunately. The copyright is actually held by the university. Possibly someone else at the university would be interested.

  58. Where's your lawsuit threat jailbird homo? by Anonymous Coward · · Score: 0

    Where's your lawsuit threat jailbird homo Alex McQuown https://www.findmugshots.com/arrests/alex_marshall_mcquown_id_2334096.html/ the psycho loon that threatens DA's & gets busted? It's not you 110 lb. whimp I could snap in 1/2 with ease!

    * Stupid - DID YOU COME UP WITH A WAY TO STALL THE INTEL AMT/ME ISSUE? No, you didn't you sick little HOMO BITCH, hahahahaha! Shitstains? Bitch, you get it up the ass TOO MUCH & can't hold your shit - lol, sleep on your stomach so you can keep doing it & NOT STAIN YOUR SHEETS weirdo!

    (Vacation? I could see a TWISTED little fag like YOU calling one of your many JAIL STAYS a vacation (as you LOVE getting "your shit pushed in" no doubt - RoTfLmAo!)).

    APK

    P.S.=> You're a stupid little whacko stalker & a GENETIC ABERRATION faggot (abnormal freak, lol)... apk

    1. Re:Where's your lawsuit threat jailbird homo? by Anonymous Coward · · Score: 0

      Omg you are not kidding! Look what that sicko Alex McQuown\Khyber admits doing in his spare time filming and broadcasting gay porn https://slashdot.org/comments.pl?sid=11045423&cid=55099157/

  59. I tell it like it is vs. sick freak Khyber by Anonymous Coward · · Score: 0

    He told me he's part of a minerological society? SanQuentin rockpile work in prison != minerological surveys & he FLIIPPED OUT after I said that + exposed he's one sick little twisted weirdo & recidivistic JAILBIRD (druggie too from what I heard of him, bigtime) AND then out of impotent LIMP WHIMP "HoMo RaGe", lol, he threatened me with a lawsuit (which in and of itself not following thru is grounds for me to sue him easily) that he can't even start since what I say of his jailtime is no lie & he knows it, lol!

    ... & no lie about his "HomoThatLikesGettingERECTUS" (ugh, lol) mental issues either!

    Believe me - Khyber/Alex McQuown's (raging flaming homo druggie jailbird freak) a severely twisted demented weirdo genetic aberration that's unnatural, and WORSE than ANY WOMAN I've ever met (he stalks me constantly because his "gay pride" is injured, lol - the little do nothing KNOWS he's a twisted reject and that's why it all gets to him so badly).

    APK

    P.S.=> Slashdot's had its share of REAL weirdos but I have to admit that "Khyber" (Alex McQuown behind his FAKE NAME for his FAKE LIE OF A so-called "life") is the worst + most reprehensible of all of them I've seen - you point out a particularly TWISTED thing his sick ass does (disgusting)... apk

  60. copyright laws are just like other laws by cas2000 · · Score: 3, Insightful

    copyright laws are for people to obey, not for corporations.

    copyright laws are for corporations to wield, not for people.

  61. Ok crackpot homo jailbird Khyber let's do this by Anonymous Coward · · Score: 0

    "I've been saying use a router FOR YEARS ON THIS SITE, since it was revealed that the OS and some programs bypass HOSTs AT WILL, oh but suddenly you won't go back and post any of those links to the arguments, because that would MAKE YOU WRONG AND A LIAR" - by Khyber ( 864651 ) on Sunday December 10, 2017 @05:31PM (#55712583) Homepage

    Let's go @ this based on that quote of you so I can annihilate you: Windows bypasses hosts for Windows update Even "TheGarbz" says that https://tech.slashdot.org/comments.pl?sid=9452517&cid=52602309/ you whacko AIDS dementia riddled DELUDED Homo loon!

    IF a browser "bypasses hosts" then it is DESIGNED EXTREMELY POORLY as tcpip.sys works faster & IS THE MAJOR RESOLVER IN THE IP STACK stupid - doing it twice would be EXTREMELY FUCKING STUPID!

    APK

    P.S.=> Lastly on routers: I can produce PROOF (solid UNDENIABLE PROOF I was even PAID on in security guides I did a decade++ ago) that I was suggesting using routers (& PORT FILTERING)... apk

  62. Proving Khyber is a LIAR (projecting it too) by Anonymous Coward · · Score: 0

    "suddenly you won't go back and post any of those links to the arguments, because that would MAKE YOU WRONG AND A LIAR" - by Khyber ( 864651 ) on Sunday December 10, 2017 @05:31PM (#55712583)

    Why'd you run CLAIMING you created your very own network communication protocol & I ask you prove it https://yro.slashdot.org/comments.pl?sid=10245269&cid=53880349/ ?

    * WHO'S THE LIAR HOMO FREAK?? YOU ARE!

    APK

    P.S.=> You dirty little fucking faggot game playing little BITCH (think I don't KNOW it was you that started this crap too LYING that "a friend told you I was discussing you" you little TWAT ANUS genetic aberration cocksucking ass fucking FREAK? Bitch, you play BITCH GAMES - not w/ me freak. You can't get away with it (I've got DOZENS LIKE THIS bookmarked on your LYING ASS homo liar))... apk

    1. Re:Proving Khyber is a LIAR (projecting it too) by Khyber · · Score: 1

      Holy shit look at this raging fuck. I come back from vacation and lookie here. Absolutely amusing how easy it is to make you mad. Let's keep playing this, because that means I control you.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
  63. Re:Prison for not disclosing Intel vulnerabilities by Anonymous Coward · · Score: 0

    Intel is putting 6.4 TONS EACH YEAR of fluoride compounds into the air around its plant!

    Look Ma! No cavities!

  64. Re:Stop with the evil ME claims! by Anonymous Coward · · Score: 0

    Do 99% of the users not want their CPU to boot? The management engine does more than just remote management. It manages the entire system. from first boot process to power management.

    I want my CPU to boot without security vulnerabilities. Minimizing the attack surface is in Computer Security 101.