2 ms·
Seems like you can "Permanently Disable" ME using their BIOS on Thinkpads.
by a-ve 7y ago
Seems like you can "Permanently Disable" ME using their BIOS on Thinkpads.
- segfaultbuserr 7y agoI think it just disables the management feature, the ME itself is always active to an extent. BTW, don't forget to also disable Computrace.
- scohesc 7y agoI haven't done any reading into this but as far as I know on the used Thinkpad I have Computrace is "available" but hasn't been connected to any sort of third-party tracking service. Should I disable this forever? Is Computrace tracking me even with the service not connected to anything?
- segfaultbuserr 7y agoThe main concern here is not "Computrace is tracking you", but "Computrace may be exploited". Basically, if Computraced is activated, it will actively attempt to inject its payload into Windows via BIOS to achieve persistence even after an OS reinstallation - like a rootkit. If a vulnerability allows an attacker to somehow control this process, nobody knows how far the attacker can go... * Deactivate the Rootkit: Attacks on BIOS anti-theft technologies https://www.blackhat.com/presentations/bh-usa-09/ORTEGA/BHUSA09-Ortega-DeactivateRootkit-PAPER.pdf https://www.blackhat.com/presentations/bh-usa-09/ORTEGA/BHUS... * Stuff just got real - First Computraced-based UEFI rootkit https://tcsltesting.blogspot.com/2018/09/stuff-just-got-real.html https://tcsltesting.blogspot.com/2018/09/stuff-just-got-real...