由买买提看人间百态

boards

本页内容为未名空间相应帖子的节选和存档,一周内的贴子最多显示50字,超过一周显示500字 访问原贴
Programming版 - MINIX — The most popular OS in the world, thanks to Intel
相关主题
牛人就是拽:Linus Torvalds一直讨厌这11项技术why copy assignment operator returns non-const type?
这样的开源软件合作靠谱吗? (转载)请教牛人:自学内核编程怎么开始呢
问个问题,关于critical section的实现,用C什么OPEN SOURCE的CODE对初级用户比较有用
chip信用卡为什么等那么久 (转载)Unix在计算机历史上的传奇(转载)
ambiguous operators in c++真正有货的,没有骂人的
问个函数指针指向操作符的问题中国航天SpaceOS操作系统
C语言里面的register变量能否进行取地址操作? (转载)把中国变成行业的原创先峰
[C++] 入门级问题 increment and decrement operatorsScala的operator似乎不太好读
相关话题的讨论汇总
话题: minix话题: intel话题: cpu话题: ring话题: os
进入Programming版参与讨论
1 (共1页)
p*u
发帖数: 2454
1
Intel不仅脑残而且rude,都不跟作者打声招呼:

Take a look at your desktop computer. What operating system is it currently
running?
Now take a look in your data center — at all of your servers. What
operating system are they running?
Linux? Microsoft Windows? Mac OS X? You could be running any of those three
— or one of countless others.
But here’s the crazy part: That’s not the only operating system you’re
running.
If you have a modern Intel CPU (released in the last few years) with Intel’
s Management Engine built in, you’ve got another complete operating system
running that you might not have had any clue was in there: MINIX.
That’s right. MINIX. The Unix-like OS originally developed by Andrew
Tanenbaum as an educational tool — to demonstrate operating system
programming — is built into every new Intel CPU.
MINIX is running on “Ring -3” (that’s “negative 3”) on its own CPU. A
CPU that you, the user/owner of the machine, have no access to. The lowest
“Ring” you have any real access to is “Ring 0,” which is where the
kernel of your OS (the one that you actually chose to use, such as Linux)
resides. Most user applications take place in “Ring 3” (without the
negative).
The first thing that jumps out at me here: This means MINIX (specifically a
version of MINIX 3) is in all likelihood the most popular OS shipping today
on modern Intel-based computers (desktops, laptops and servers). That, right
there, is absolutely crazy.
The second thing to make my head explode: You have zero access to “Ring -3
” / MINIX. But MINIX has total and complete access to the entirety of your
computer. All of it. It knows all and sees all, which presents a huge
security risk — especially if MINIX, on that super-secret Ring -3 CPU, is
running many services and isn’t updated regularly with security patches.
Google wants to remove MINIX from its internal servers
According to Google, which is actively working to remove Intel’s Management
Engine (MINIX) from their internal servers (for obvious security reasons),
the following features exist within Ring -3:
Full networking stack
File systems
Many drivers (including USB, networking, etc.)
A web server
That’s right. A web server. Your CPU has a secret web server that you are
not allowed to access, and, apparently, Intel does not want you to know
about.
Why on this green Earth is there a web server in a hidden part of my CPU?
WHY?
The only reason I can think of is if the makers of the CPU wanted a way to
serve up content via the internet without you knowing about it. Combine that
with the fact that Ring -3 has 100 percent access to everything on the
computer, and that should make you just a teensy bit nervous.
The security risks here are off the charts — for home users and enterprises
. The privacy implications are tremendous and overwhelming.
Note to Intel: If Google doesn’t trust your CPUs on their own servers,
maybe you should consider removing this “feature.” Otherwise, at some
point they’ll (likely) move away from your CPUs entirely.
Note to AMD: Now might be a good time to remove similar functionality from
your CPU lines to try to win market share from Intel. Better to do so now
before Intel removes the “Management Engine.” Strike while the iron’s hot
and all that.
Note to Andrew Tanenbaum: Your operating system, MINIX, is now one of the
most used on modern computers! That’s kinda cool, right?
Note to everyone else: We’re all MINIX users now.

https://www.networkworld.com/article/3236064/servers/minix-the-most-popular-
os-in-the-world-thanks-to-intel.html
n****g
发帖数: 14743
2
当年玩过这个

currently
three

【在 p*u 的大作中提到】
: Intel不仅脑残而且rude,都不跟作者打声招呼:
: “
: Take a look at your desktop computer. What operating system is it currently
: running?
: Now take a look in your data center — at all of your servers. What
: operating system are they running?
: Linux? Microsoft Windows? Mac OS X? You could be running any of those three
: — or one of countless others.
: But here’s the crazy part: That’s not the only operating system you’re
: running.

w***g
发帖数: 5958
3
what the fsck!

currently
three

【在 p*u 的大作中提到】
: Intel不仅脑残而且rude,都不跟作者打声招呼:
: “
: Take a look at your desktop computer. What operating system is it currently
: running?
: Now take a look in your data center — at all of your servers. What
: operating system are they running?
: Linux? Microsoft Windows? Mac OS X? You could be running any of those three
: — or one of countless others.
: But here’s the crazy part: That’s not the only operating system you’re
: running.

n***p
发帖数: 110
4
Tanenbaum可能真不知道Intel用了,他2015年还在到处筹钱。

currently
three

【在 p*u 的大作中提到】
: Intel不仅脑残而且rude,都不跟作者打声招呼:
: “
: Take a look at your desktop computer. What operating system is it currently
: running?
: Now take a look in your data center — at all of your servers. What
: operating system are they running?
: Linux? Microsoft Windows? Mac OS X? You could be running any of those three
: — or one of countless others.
: But here’s the crazy part: That’s not the only operating system you’re
: running.

g****t
发帖数: 31659
5
散户只能默默忍受
十个字
o**o
发帖数: 3964
6
intel这个management engine是集成在主板的BIOS里吧,只有DELL或者HP这样的服务器
才有,是为了方便企业安装监控机器。大部分普通用户应该没有。
p*u
发帖数: 2454
7
新闻里说大部分desktop芯片里面也有,管boot system的。

【在 o**o 的大作中提到】
: intel这个management engine是集成在主板的BIOS里吧,只有DELL或者HP这样的服务器
: 才有,是为了方便企业安装监控机器。大部分普通用户应该没有。

c********1
发帖数: 5269
8
Firmware

【在 p*u 的大作中提到】
: 新闻里说大部分desktop芯片里面也有,管boot system的。
t*****n
发帖数: 2578
9
二十多年前读书的时候见过,买了本书看了看
没想到我一直在默默地使用它啊
阴特自己开发个不行么?非得盗用一个别人的
r*****z
发帖数: 906
10
这就是为什么开源软件应该用GPL
1 (共1页)
进入Programming版参与讨论
相关主题
Scala的operator似乎不太好读ambiguous operators in c++
程序员有啥核心竞争力问个函数指针指向操作符的问题
Linus在狗狗能干过jeff dean,我看不一定。。。C语言里面的register变量能否进行取地址操作? (转载)
phd码工感觉是完全不同的一个档次[C++] 入门级问题 increment and decrement operators
牛人就是拽:Linus Torvalds一直讨厌这11项技术why copy assignment operator returns non-const type?
这样的开源软件合作靠谱吗? (转载)请教牛人:自学内核编程怎么开始呢
问个问题,关于critical section的实现,用C什么OPEN SOURCE的CODE对初级用户比较有用
chip信用卡为什么等那么久 (转载)Unix在计算机历史上的传奇(转载)
相关话题的讨论汇总
话题: minix话题: intel话题: cpu话题: ring话题: os