Re: [Libreboot] Blocking Intel ME ?

[Daniel Tarrero]

What makes me wonder if it really do what they tell, only that, and in a
propper, secure, and smart way.

take a look at this, can help in finding Intel MEs:
https://communities.intel.com/docs/DOC-5693

Remember that Intel ME platform itself is not a secret. The dark side is
the code running in it (aka firmware), the undocumented features it can
have, the unsight bugs it can contain, and all this in the most
presumtion of trust.


D



El mar, 02-02-2016 a las 06:37 -0800, address@hidden escribió:
> https://libreboot.org/faq/#intel explains,
> "Introduced in June 2006 in Intel's 965 Express Chipset Family of 
>  (Graphics and) Memory Controller Hubs, or (G)MCHs, and the ICH8 I/O 
>  Controller Family, the Intel Management Engine (ME) is a separate 
>  computing environment ..."
>  
>  That page is indispensable.  Thanks to Francis Rowe.
>  
> An ongoing demand exists for embedded systems.  In principle, a 
> cpu with no ME will be cheaper than one with a ME.  Price 
> competition should motivate production of "ME free" cpus.  Also financial 
> and government markets will be unwilling to compromise security and 
> will seek machines without the ME or similar subsystem.  CPU are 
> likely to continue for these markets.  
>  
> Suppose a person doesn't have extensive and detailed familiarity with 
> Intel products.  Can such person determine whether a given cpu has a 
> ME?  For example, I have an Intel Desktop Board D945GSEJT.  First 
> release of the document was 2009, April.  The cpu is a single-core 
> Atom N270.  Web pages indicate the machine was marketed as an 
> audio/video appliance.  A product review of the N270 lists features as 
> MMX, SSE, SSE2, SSE3, SSSE3, HHT, Execute Disable Bit, Enhanced 
> Speedstep and Hyper-Threading.  No mention of an ME but 2006 < 2009.  
> Is an ME present?  How can the question be answered?
>  
> Thanks,                               ... Peter E.
>  
> 
>