Linked by Thom Holwerda on Tue 10th Oct 2017 23:45 UTC

The Intel Management Engine ('IME' or 'ME') is an out-of-band co-processor integrated in all post-2006 Intel-CPU-based PCs. It has full network and memory access and runs proprietary, signed, closed-source software at ring -2, independently of the BIOS, main CPU and platform operating system - a fact which many regard as an unacceptable security risk (particularly given that at least one remotely exploitable security hole has already been reported).

In this mini-guide, I'll run through the process of disabling the IME on your target PC.

Apparently, the IME co-processor runs... MINIX 3. That is incredibly fascinating. This means every post-2006 Intel PC runs MINIX.

Permalink for comment 649767
To read all comments associated with this story, please click here.
NOT in all post-2006 Intel-CPU-based PCs.
by bhhenry on Wed 11th Oct 2017 17:40 UTC
Member since:

The Intel Management Engine chip and firmware need to be installed on the motherboard. Not all hardware sold since 2006 has this. It is typically included as a feature for Corporate use.

Reply Score: 2