Re:How Purism avoids Intel’s Active Management Technology
by boring_twenties on Sunday August 16, 2020 @06:44PM
(#24182017)
It might require physical access, as with https://www.intel.com/content/www/us/en/security-center/advi... but that's still pretty bad as it allows for rootkits completely undetectable from the OS environment.
If it has no NIC access and the OS doesn't have access to it because it's not hanging on PCIe anymore, so if it's only there for system bringup, it's essentially sealed off from the world.