News for hackers. Stuff that matters.
Re:Disabling the Intel Management Engine by Foxboron on Tuesday October 10, 2017 @07:14PM (#15446068)
Right, so they select HW so the remote access isn't available. Good, but this doesn't remove IME.
Re:Disabling the Intel Management Engine by xwvvvvwx on Tuesday October 10, 2017 @07:29PM (#15446123)
From that page:

we take the extra precaution of neutralizing the ME itself (removing everything but the “hardware initialization” module)

Am I missing something?

Re:Disabling the Intel Management Engine by Foxboron on Tuesday October 10, 2017 @07:37PM (#15446161)
No, you seem to be correct. I'm just being highly sceptical of the puri.sm folks because of their marketing.

It seems like their current devices are sold with me_cleaner being ran, along with removing several "fuses". Which is pretty good.

I'm still unsure if buying these laptops actually sends a signal that this isn't OK. Intel gets their money in the end.

Re:Disabling the Intel Management Engine by zanny on Tuesday October 10, 2017 @10:38PM (#15446916)
You can't buy a mass-market computer that doesn't have either an obvious backdoor or proprietary firmware right now, except for the one Chromebook that Libreboot supports.

And even then, your RAM has proprietary code running on it (I'm not aware of any DDR4 that doesn't have embedded SoCs for initialization, none of that is done in CPU firmware anymore), your hard drives can have up to entire embedded SoCs with proprietary code running on them, and there isn't an unencumbered 802.11AN wireless chip in existence. The only bright side to that is none of that hardware has system-wide access the way these backdoor coprocessors do.

Re:Disabling the Intel Management Engine by zdkl on Wednesday October 11, 2017 @10:13AM (#15449902)
Who needs system wide compromise when you can read what's hitting both RAM and persistent memory.
Re:Disabling the Intel Management Engine by roblabla on Wednesday October 11, 2017 @03:47AM (#15447972)
I doubt we can get Intel to change directly. Most people don't buy from them directly anyway. My belief is that we can get OEMs to consider this a serious issue, and have them turn into a market pressure on CPU manufacturers. After all, OEM's life would be simpler if Intel simply didn't put the IME that everyone wants removed.
Re:Disabling the Intel Management Engine by Foxboron on Wednesday October 11, 2017 @04:16AM (#15448104)
>After all, OEM's life would be simpler if Intel simply didn't put the IME that everyone wants removed.

Most people don't know that IME exists, they won't know either. You won't see an uproar from the consumers, because there are few that care (us). You are better off informing the general public in my opinion.

EDIT: I'd actually put money into RISC-V products instead.