English
u2usvc
60 posts
People bragging on LinkedIn that they got approved for Anthropic's Cyber Verification Program.. poor deluded souls 🤣
GIF
English
@ZackKorman I swear people at anthropic be doing everything to hype their shit up as much as they can
English
If Kimi 3 is actually better than Opus 4.8 then I just want to say it was good knowing you all. Stay strong through the cyber apocalypse.
English
@Shugiie1 @shotgunner101 Even considering the person is dedicated enough to change dtpm everytime, this won't save him from a broader attack surface within a mainboard
English
@u2usvc @shotgunner101 Why you asking me instead of the guy claiming tpm has to do with privacy? dtpm is interchangeable ftpm isn't (in most cases, yes some mainboards "allow" changing these)
English
For those who don't know they do track TPM information between reimages. I've been told previoisly by multiple ex-MS SOC staff that this is exactly what's used to track people for half a decade even if they are privacy conscious.
VPNs, TOR, etc doesn't matter when Microsoft is tracking your physical hardware and tracking your system activities over years....
vx-underground@vxunderground
> Peter Stokes > Scattered Spider guy > Arrested > Microsoft helps FBI > Read court documents > Page 12 > Microsoft tracks Stokes from GDID > Microsoft Global Device Identifier (GDID) > Stokes used Windows > Page 34 > GDID assigned to each OS install > GDID unique to each device > GDID only change if OS wiped > Stokes GDID 6755467234350028 > GDID reported internet activity to Microsoft > GDID showed Stokes using Ngrok > GDID reported Stokes IP address > GDID showed Stokes web activity > GDID showed timestamps of web activity > GDID mapped with video game activity > GDID showed games played > GDID undocumented > GDID only mentioned in one MSDN document > Azure UCDOStatus > Azure Monitor Logging
English
@bugler @AnonVendetta2 @dogen_1 @shotgunner101 - AMT needs to be enabled explicitly, because it is off by default
- AMT is intended for business
- all documented vulns in AMT and IME net capabilities require AMT to be enabled
- Presumption of innocence
English
@bugler @AnonVendetta2 @dogen_1 @shotgunner101 I am aware of that. A large portion of chips in consumer mainboards have their own OS/RTOS and have DMA - it doesn't indicate anything. Intel AMT has been around for more than 20 years and is being assessed all the time, so yeah a lot of vulns were found. BUT nothing malicious
English
@dogen_1 @shotgunner101 Still have hardware level spyware like Intel ME and the AMD equivalent PSP
English
@JONEMARROW @shotgunner101 You dont get it, thats ok. It completely changes the id and attestation ive tested on multiple anticheats.
English
@dogen_1 @shotgunner101 Not really, because
1) the TPM is still there and it's persistent EK is still retrievable afaik
2) the motherboard (and its fw) itself has a series of identifiers that are WINAPI-retrievable and persistent across reinstalls
English
@shotgunner101 I disable tpm and secure boot typically. is that not effective?
English
@shotgunner101 Thats why any "privacy conscious" person runs dtpm instead of ftpm
English
@vxunderground How many TBs (7z ultra compressed) of cat pics do you possess?
English
Hello
1. If you're reading this, that means you live inside my computer. Please leave my computer. You are stinking the place up.
2. I am syncing 150,000+ malwares to the internet. Please download the malware.
3. I now possess 14TB (7z ultra compressed) of malware
English
@lazylonelion @Existsindeath @T3chFalcon AFAIK all vulnerabilities w/o AMT require physical or SYSTEM/root access. Am I wrong?
English
@Existsindeath @u2usvc @T3chFalcon I did search. There is no proof that ME is spyware. Nor have you provided any.
There are/were vulnerabilities that could be exploited... if an attacker has physical access to your computer or at least has some access to your OS (depends on vulnerability).
English
Most people who care about privacy focus on their operating system. Linux over Windows. open source over proprietary.
That's good. it's also not enough.
Here's what's running below your OS on almost every Intel computer made since 2006:
The Intel Management Engine is a separate processor inside your chipset running its own closed-source operating system called Minix 3. It has direct access to your RAM, storage, network, and peripherals. it runs at Ring -3 below your kernel, below your hypervisor, below everything your OS can see or control. it stays active even when your computer is powered off as long as it's plugged in.
You cannot audit it. you cannot disable it through normal means. You cannot detect what it's doing from inside your OS.
The EFF called it a security hazard in 2017. The Libreboot project said it has complete access to and control over your PC, including the ability to track keystrokes, capture screen images, and examine all running applications.
Intel confirmed multiple vulnerabilities in ME in 2017 affecting 6th through 8th generation Core processors, Xeon, and Atom chips. Researchers demonstrated it could be used to inject rootkits remotely via the network interface.
The only known method to fully disable it was discovered by Positive Technologies. They found a hidden bit in the firmware labeled 'HAP enable' part of an NSA program called High Assurance Platform.
The NSA has a switch to disable Intel ME.
you don't.
if you want hardware that doesn't include ME: AMD processors do not have the same implementation. Purism builds laptops with ME neutralized. The Libreboot project has a list of hardware that can run without proprietary firmware.
Your threat model determines how far down this rabbit hole you need to go.
But you should know the rabbit hole exists.
𝐇𝐚𝐦𝐳𝐚 | Networking Guy@Hamzaonchain
@T3chFalcon is this true?
English
@Existsindeath @lazylonelion @T3chFalcon He meant you can disable AMT, which would disable remote management functionality on IME
English
@lazylonelion @T3chFalcon No. You completely misunderstand. Intel ME is not able to be disabled. You have 0 access. At this point I am convinced you don't understand what you are actually talking about.
English
This seems misleading... IME is ancient and there is still no evidence that IME sends out any traffic secretly.
IME really does:
- have DMA
- have PHY access (for AMT)
- provide a broad set of RMM functionality called AMT. (similar to BMC)
but it
(1/4)
IT Guy@T3chFalcon
Most people who care about privacy focus on their operating system. Linux over Windows. open source over proprietary. That's good. it's also not enough. Here's what's running below your OS on almost every Intel computer made since 2006: The Intel Management Engine is a separate processor inside your chipset running its own closed-source operating system called Minix 3. It has direct access to your RAM, storage, network, and peripherals. it runs at Ring -3 below your kernel, below your hypervisor, below everything your OS can see or control. it stays active even when your computer is powered off as long as it's plugged in. You cannot audit it. you cannot disable it through normal means. You cannot detect what it's doing from inside your OS. The EFF called it a security hazard in 2017. The Libreboot project said it has complete access to and control over your PC, including the ability to track keystrokes, capture screen images, and examine all running applications. Intel confirmed multiple vulnerabilities in ME in 2017 affecting 6th through 8th generation Core processors, Xeon, and Atom chips. Researchers demonstrated it could be used to inject rootkits remotely via the network interface. The only known method to fully disable it was discovered by Positive Technologies. They found a hidden bit in the firmware labeled 'HAP enable' part of an NSA program called High Assurance Platform. The NSA has a switch to disable Intel ME. you don't. if you want hardware that doesn't include ME: AMD processors do not have the same implementation. Purism builds laptops with ME neutralized. The Libreboot project has a list of hardware that can run without proprietary firmware. Your threat model determines how far down this rabbit hole you need to go. But you should know the rabbit hole exists.
English
@ghost_pepper108 @chompie1337 Same thing here, have to switch to opus 4.7
English
@chompie1337 Well my CVP approval did not really help me reach my goals. Claude started aggressively refusing to cooperate after a while, although starting a new session seems to help but not sure, attempts going on.
You are right though. This is getting really annoying.
English
To be clear: I have not run into any guardrail issues beyond this. From what I know, I honestly believe that any mention of Bobby or his research is blacklisted by a text match in the newer Opus models.
chompie@chompie1337
Fool proof way to 100% get cyber guard railed by Claude no matter what: vaguely mention @0xBoku research
English
