SoylentNews is people
SoylentNews
HP's Endpoint Security Controller: More Details About A New Chip in HP Notebooks
One of HP's key announcements this spring was its revamped security initiative for PCs that includes hardware, software, and deep learning-based approaches. The software and DL parts of the things were discussed earlier this month, but the hardware-based Endpoint Security Controller remained more or less a mystery. This is why we asked HP to talk about it in more detail.
When it was announced, the company said that the HP Endpoint Security Controller is indeed a separate piece of silicon that sits inside HP's PCs and performs certain security-based tasks. The ESC features a general-purpose processor core, HP's custom hardware IP blocks, and embedded software. What is interesting is that HP has been installing the controller into its laptops since the EliteBook 800 G1 series launched in 2013, but has been very secretive about it until recently.
Initially, HP used the Endpoint Security Controller only for its Sure Start technology that can 'heal'/recover the system BIOS. Fast forward to 2019, and the controller has gained capabilities. HP now uses it to protect Intel's Management Engine, and to enable its Sure Run and Sure Recover capabilities.
Would you rather purchase a Huawei or HP laptop?
[We have covered the Intel Management Engine many times before. --Ed]
(Score: 2, Interesting) by Anonymous Coward on Saturday May 04 2019, @10:31AM
Customers complain to tech support when they forget their BIOS password or screw something up and magically expect everything to be fixed. Corporations don't want employees stealing laptops and remote flashing/updating 5000 laptops is far, far cheaper than manually updating each one. We can no longer have fixed BIOSes because companies and developers are too lazy to do things right the first time. They can't have write-protect switches because that would add 40 cents to the cost of the product and customers would mess with it. The chip allows more extensive debugging features during development. The media industry gives kickbacks to companies which help it secure analog/digital holes. The manufactures can claim their hardware is brick-proof as failed BIOS updates used to be a big concern. Of course there are other ways to do that, but few care. The FCC requires they prohibit installation of wireless devices which can be pushed above the legal limits. And finally, they only want customers buying replacement components from them. See how well Apple does controlling everything. See how well Intel fared with all the compatible clones.