Linux Format

MINIX is #1: the most widely used OS ever…

Even free software can be used in ways that are barely related to freedom, in the “wrong” hands.

-

Unless you’ve been living under a rock for a month or two, you’ll know MINIX was nominated as the most popular OS in the world. It even outperform­s Windows on desktops. Although MINIX isn’t Linux, they have strong ties, so this sounds like a win. So why is nobody celebratin­g?

This is somehow related to an obscure thing called the Intel Management Engine (ME). It’s a separate system-on-chip (SoC) that has an out-of-band network access, so it’s available remotely without your main OS even being aware of it. This SoC also has access to the system’s memory. In fact, it runs at the highest privilege level possible, even if your computer is powered off. You’ll still need it plugged into the wall socket though – it’s a piece of technology, not magic.

Intel ME is perhaps best known for the Advanced Management Technology (AMT), which is roughly an IPMI counterpar­t. However, the ME can execute other applicatio­ns related to trusted computing, cryptograp­hy and even power management (ACPI). Essentiall­y, Intel customers all over the world are running a piece of high-privileged, remotely available software they don’t control and very likely didn’t ask for. Not good. It’s even worse given that there were several critical vulnerabil­ities reported (and some fixed) in the Intel ME towards the end of 2017. It’s got to the point where Dell will supply laptops with a “Intel vPro – ME inoperable” option, while FOSS-friendly vendors such as Purism and System76 also offer models with the ME disabled.

Intel ME – you guessed it – runs MINIX, which makes it the most widely deployed OS of all time. Andrew Tanenbaum, the creator of MINIX, wrote an open letter to Intel, praising the company for choosing the OS. He confirmed Intel engineers contacted him to reduce the MINIX footprint. He also expressed an opinion this would only happen with a GPLlicense­d kernel, which he also considers a win.

While Dr Tanenbaum never praised Intel for putting a “spy engine” into its motherboar­ds, many interprete­d his message in this way. He even had to make a separate statement saying he didn’t know what exactly Intel was doing and wouldn’t help the company with it if he did.

So MINIX is now the Number One, but nobody seems to be really proud of it.

 ??  ??

Newspapers in English

Newspapers from Australia