Linked by Thom Holwerda on Tue 10th Oct 2017 23:45 UTC

The Intel Management Engine ('IME' or 'ME') is an out-of-band co-processor integrated in all post-2006 Intel-CPU-based PCs. It has full network and memory access and runs proprietary, signed, closed-source software at ring -2, independently of the BIOS, main CPU and platform operating system - a fact which many regard as an unacceptable security risk (particularly given that at least one remotely exploitable security hole has already been reported).

In this mini-guide, I'll run through the process of disabling the IME on your target PC.

Apparently, the IME co-processor runs... MINIX 3. That is incredibly fascinating. This means every post-2006 Intel PC runs MINIX.

Permalink for comment 649748
To read all comments associated with this story, please click here.
Interesting process but ...
by shotsman on Wed 11th Oct 2017 05:25 UTC
Member since:

this is certainly not for everyone. I'm sure that if you follow the steps perfectly you may do it but TBH, it seem an awful lot more trouble than it is worth.
I suspect that only the most paranoid or who work for the various TLA's around the world will bother.

For the average punter? I don't see any compelling reason to do this (at the moment)

But... it was interesting to find out that it can be done.
Thanks Thom.

Reply Score: 3