Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Jun 2008 01:55:43 -0700
From:      perryh@pluto.rain.com
To:        wojtek@wojtek.tensor.gdynia.pl, daf@freebsd.org
Cc:        naylor.b.david@gmail.com, freebsd-questions@freebsd.org
Subject:   Re: FreeBSD and User Security
Message-ID:  <4850e48f.OySiv66mGU2z%2BZMS%perryh@pluto.rain.com>
In-Reply-To: <20080612093739.J2278@wojtek.tensor.gdynia.pl>
References:  <20080611210313.6D88F8FC1C@mx1.freebsd.org> <20080612093739.J2278@wojtek.tensor.gdynia.pl>

next in thread | previous in thread | raw e-mail | index | archive | help
> > It is my understanding that since 1995 all computers must have  
> > a hardware back door that permits undetectable access by the 
> > government to the computer. This capability can be implemented 
> > using System Monitor(Maintenance) Mode which is built into all 
> > x86 computers now. It would appear that, if you are connected 
> > to the internet, the government has access to your computer.
>
> if it were true, this "system maintenance mode" would have to 
> access your network card in parallel with main OS without making 
> conflicts
 
A near-trivial exercise in virtualization, provided it knows what 
kind of card is in use and what addresses it occupies, which is
rather easy if the "card" is in fact built onto the mainboard.  Of
course, it is also trivial to defeat it by using an add-in card
instead of the one on the mainboard, esp. a card whose design did
not exist when the bios was written.

Cycles consumed by SMM might also explain why some PCs' clocks seem
to run slower than real time ...



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4850e48f.OySiv66mGU2z%2BZMS%perryh>