SoylentNews
SoylentNews is people
https://soylentnews.org/

canopic jug and an Anonymous Coward submitted the following story about the Intel Management Engine (IME):

Professor Andrew S. Tanenbaum from the Department of Computer Science at Vrije Universiteit Amsterdam wrote "An Open Letter to Intel" regarding Intel's use of MINIX 3 to run the Intel Management Engine (video) built into their processors:

Thanks for putting a version of MINIX 3 inside the ME-11 management engine chip used on almost all recent desktop and laptop computers in the world. I guess that makes MINIX the most widely used computer operating system in the world, even more than Windows, Linux, or MacOS. And I didn't even know until I read a press report about it. Also here and here and here and here and here (in Dutch), and a bunch of other places.

[...] Note added later: Some people have pointed out online that if MINIX had a GPL license, Intel might not have used it since then it would have had to publish the modifications to the code. Maybe yes, maybe no, but the modifications were no doubt technical issues involving which mode processes run in, etc. My understanding, however, is that the small size and modular microkernel structure were the primary attractions. Many people (including me) don't like the idea of an all-powerful management engine in there at all (since it is a possible security hole and a dangerous idea in the first place), but that is Intel's business decision and a separate issue from the code it runs. A company as big as Intel could obviously write its own OS if it had to. My point is that big companies with lots of resources and expertise sometimes use microkernels, especially in embedded systems. The L4 microkernel has been running inside smartphone chips for years.

Professor Tanenbaum did the initial design and development of MINIX, a microkernel used primarily for teaching. He has helped guide it through the years as a small community around it has grown. Lately it has adopted much of the NetBSD userspace. The IME is a full operating system system running inside x86 computers. It gets run before whatever system on the actual hard disk even starts booting.

Related: Intel Management Engine Partially Defeated
EFF: Intel's Management Engine is a Security Hazard
Disabling Intel ME 11 Via Undocumented Mode
How-To: Disabling the Intel Management Engine
Positive Technologies - Learn and Secure : Intel ME: The Way of Static Analysis (takyon: I marked this one to not display at the time since it was a blog post from April and ran within hours of the preceding IME story.)
Purism Disables Intel Management Engine on Librem Laptops

Original Submission #1  Original Submission #2 

1. "canopic jug" - https://soylentnews.org/~canopic+jug/
2. "Intel Management Engine" - https://en.wikipedia.org/wiki/Intel_Active_Management_Technology
3. "Andrew S. Tanenbaum" - https://en.wikipedia.org/wiki/Andrew_S._Tanenbaum
4. ""An Open Letter to Intel"" - http://www.cs.vu.nl/~ast/intel/
5. "Intel Management Engine" - http://www.tomshardware.com/reviews/vpro-amt-management-kvm,3003-6.html
6. "(video)" - https://www.youtube.com/watch?v=iffTJ1vPCSo
7. "press report" - https://www.networkworld.com/article/3236064/servers/minix-the-most-popular-os-in-the-world-thanks-to-intel.html
8. "here" - https://www.techpowerup.com/238514/intel-cpu-on-chip-management-engine-runs-on-minix
9. "here" - https://hexus.net/tech/news/software/111857-intel-management-engine-runs-minix-3-os/
10. "here" - http://blog.ptsecurity.com/2017/08/disabling-intel-me.html
11. "here" - https://liveatpc.com/widely-used-os-world-least-known/
12. " here" - http://webwereld.nl/security/101772-het-populairste-besturingssysteem-ter-wereld-is---minix
13. "MINIX" - https://en.wikipedia.org/wiki/MINIX
14. "Intel Management Engine Partially Defeated" - https://soylentnews.org/article.pl?sid=17/01/13/1833205
15. "EFF: Intel's Management Engine is a Security Hazard" - https://soylentnews.org/article.pl?sid=17/05/14/2038214
16. "Disabling Intel ME 11 Via Undocumented Mode" - https://soylentnews.org/article.pl?sid=17/09/01/0229244
17. "How-To: Disabling the Intel Management Engine" - https://soylentnews.org/article.pl?sid=17/10/15/0231220
18. "Positive Technologies - Learn and Secure : Intel ME: The Way of Static Analysis" - https://soylentnews.org/submit.pl?op=viewsub&subid=22756
19. "Purism Disables Intel Management Engine on Librem Laptops" - https://soylentnews.org/article.pl?sid=17/10/22/1246249
20. "Original Submission #1" - https://soylentnews.org/submit.pl?op=viewsub&subid=23219
21. "Original Submission #2" - https://soylentnews.org/submit.pl?op=viewsub&subid=23212

printed from SoylentNews, Andrew Tanenbaum's Open Letter to Intel About MINIX 3 on 2023-06-11 06:42:29