इंटरनेट सुरक्षा

• *माइक्रोसाफ्ट ने गुजरात में नायारा तेल कंपनी की सेवाएं ठप कीं, २०२५
• * विंडोज में 1999 से अमरीकी सरकार के लिए जासूसी का पुराना इतिहास है। _ Wikipedia article
• सिग्नल ऐप Signal App server side is questionable - phone number, contact sync, server side logging (who talked to whom). Server side audit and inspection is complicated. Most people quote a hearing where Signal didn't reveal metadata, but this is misleading projection of more-secure-than-it-is.
• Tor is another such expose in Surveillance Valley by Yasha Levine.

Intel processor backdoors and side-effects

Since 2009 all intel processors have a less-transparent and less-documented extra processor within processor die/board. Its called by names - Intel backdoor - Intel AMT (IME).

It is not visible to Linux running on top of system, yet has abnormal access to - memory, devices and ethernet traffic.

Overview video about hacks and possible defenses

3 impact analysis presentations

Hackers sharing their findings - 2017-me_cleaner, ME version 11.x

Intel Chips

Feature/vulnerability	Security concerns	General safety precautions	Specific solution
ME (management engine) + vPro (AMT)	- Almost all AMT features are available even if the PC/laptop is in a powered-off state but with its power cord attached, if the operating system has crashed, if the software agent is missing, or if hardware (such as a hard drive or memory) has failed. - AMT is available on PCs built on the vPro platform. Platforms equipped with AMT can be managed remotely, regardless of its power state or if it has a functioning OS or not.	1. Switch off electrical power supply when PC/laptop is not in use. 2. Switch off Wifi/router when not in use. 3. Disable IPv6 on Wifi router. 4. Use MAC filtering and all possible firewall rules on Wifi/router.	1. ME firmware is stored on SPI flash memory. SPI can be re-flashed to remove ME (step-by-step detailed video). 2. ME hardware utilises network controller chip on motherboard. So install a new network card (PCI based) which will remain independent OR use a USB to LAN adapter Wifi/wired. 3. Get someone else to do it for you.
vPro(has AMT/IME)	SA-00086 CSME - (Convergence Security and Management Engine Exploit) - 2017, Gain elevated admin priviledge, Keyboard logging (similar to iphone conclave chip)	needs physical access to computer	-
Spectre	-	-	-
Meltdown	-	-	-
CSME	-	-	-

भारत में इंटरनेट सुरक्षा

M.Sc. Cyber Security

Naval office WESEE

M-Sigma app, part of Sambhav

चुनौती

Digital colonialism

वाई फाई Wifi / Modem

- Remote control of your Wifi lies with ISP company

- Wifi modem can track your physical movements within your ़home

BIOS

Even without Intel ME, manufacturers that don't use open source bios many times include Computrace baked into the bios.

Computrace is an IT asset management and theft recovery software, now known as Absolute Home & Office, that is embedded in the firmware of many computers. It is designed to deter theft and aid in the recovery of stolen devices by using a persistent module that can track the computer even if the hard drive is reformatted or replaced. Users can purchase a subscription to activate and use the service to track their computers and work with law enforcement in case of theft.

Free Software GNU/Linux (Open Source)

- sabotage and subversion from NSA / RedHat ?

- package install need root access ?

Why root access needed for installing packages? FreeBSD doesn't need root access

Not all of them need root access to run. Something not right.         Innovation in making - GUIX

- PDF

PDF dangers

- distributions falling for more users by including non-free-firmware

- Libraries

detailed video here

Chip war in AI