Intel Management Engine cleaner

Re:Intel Management Engine cleaner by yuhong on Tuesday January 17, 2017 @01:42PM (#13419928)

One of the features is anti-theft, which reminds me that the war against laptop theft is ridiculous.

[ Parent | on HN ]

Re:Intel Management Engine cleaner by djsumdog on Tuesday January 17, 2017 @02:18PM (#13420254)

I theory you could add a BIOS password, turn off booting from USB, sign your Grub bootloader, import the signing key, use full disk LUKS (including boot) via the Grub-Luks unlocking module (you need a key for your partition in your initrd too if you don't want to enter your password twice) and enable TPM.

In that setup, even if someone stole your laptop, it would be unusable, short of opening it up and fully resetting the BIOS/UEFI to its factory state, correct?

(My laptop has full-disk LUKS, a BIOS/UEFI password and doesn't boot from USB, but I still have TPM disabled and haven't signed my Grub bootloader yet.)

[ Parent | on HN ]

Re:Intel Management Engine cleaner by yuhong on Tuesday January 17, 2017 @02:20PM (#13420269)

It is about tracking stolen laptops I think.

[ Parent | on HN ]

Re:Intel Management Engine cleaner by gcb0 on Tuesday January 17, 2017 @08:34PM (#13423287)

remind me a single time the police went after your stolen device even if you have gps tracking.

this is a clear "think of the children" excuse.

[ Parent | on HN ]