4 ms·
People are afraid of the Intel Management Engine, and you can read about it here: http://libreboot.org/faq/#intel http://libreboot.org/faq/#intel It is a dense
by kawsper 11y ago
People are afraid of the Intel Management Engine, and you can read about it here: http://libreboot.org/faq/#intel http://libreboot.org/faq/#intel
It is a dense and very detailed text, but basically your Intel CPU contains Active Management Technology (AMT) which lets remote users control your computer, which may or may not be what you want, and there might be backdoors hiding here.
It also includes Intel Boot Guard, which prevents users from installing their own firmware (such as libreboot and coreboot) because it needs to be signed with a key from Intel.
The page sums it up like this:
> In summary, the Intel Management Engine and its applications are a backdoor with total access to and control over the rest of the PC. The ME is a threat to freedom, security, and privacy, and the libreboot project strongly recommends avoiding it entirely. Since recent versions of it can't be removed, this means avoiding all recent generations of Intel hardware.
- voltagex_ 11y agoI've asked a couple of times here, but I haven't had an answer: I've got an X1 carbon where the vPro/AMT/ME setup screen doesn't load (CTRL+P on boot does nothing, missing UEFI binary?). Can I still activate it in Linux for my own purposes?
- jakeogh 11y agoAlso see Joanna Rutkowska's recent paper: https://news.ycombinator.com/item?id=10458318 https://news.ycombinator.com/item?id=10458318 (fun reading).