Linked by Thom Holwerda on Tue 10th Oct 2017 23:45 UTC
Intel

The Intel Management Engine ('IME' or 'ME') is an out-of-band co-processor integrated in all post-2006 Intel-CPU-based PCs. It has full network and memory access and runs proprietary, signed, closed-source software at ring -2, independently of the BIOS, main CPU and platform operating system - a fact which many regard as an unacceptable security risk (particularly given that at least one remotely exploitable security hole has already been reported).

In this mini-guide, I'll run through the process of disabling the IME on your target PC.

Apparently, the IME co-processor runs... MINIX 3. That is incredibly fascinating. This means every post-2006 Intel PC runs MINIX.

Permalink for comment 649792
To read all comments associated with this story, please click here.
Question
by Earl C Pottinger on Thu 12th Oct 2017 21:45 UTC
Earl C Pottinger
Member since:
2008-07-12

If the CPUs run okay with IME disabled, why did we need it in the first place?

Reply Score: 2