• Meow.tar.gz@lemmy.goblackcat.com
    link
    fedilink
    English
    arrow-up
    21
    ·
    1 year ago

    Absolutely you should care! The more people that demand this capability the more that Intel and AMD will have to offer this kind of support. In fact, we should demand that the Intel Management Engine and the AMD equivalent be equipped with capability to completely disable it.

      • MigratingtoLemmy@lemmy.world
        link
        fedilink
        English
        arrow-up
        13
        ·
        1 year ago

        Technically speaking, Intel can take steps to make it easier for consumers to prevent ME from booting.

        Take AMD for example. In 2027, AMD plans to publish OpenSIL, which will basically give the community keys to the initialisation of silicon (which includes AMD PSP). Of course, Intel being the POS that they are aren’t going to do that

          • dcat@lemmy.world
            link
            fedilink
            English
            arrow-up
            4
            ·
            1 year ago

            Intel isn’t preventing you from using Coreboot, or disabling IME.

            You are probably never going to be able to boot intel CPUs without using IME.

            so … intel is preventing you from disabling IME …

        • gh0stcassette@lemmy.fmhy.ml
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          Bit of a noob question wrt IME, but I noticed a toggle in the linux kernel configuration menu to disable IME the other day when I was compiling my first custom kernel. I understand that IME is a separate processor with separate network access that operates at or below the BIOS/UEFI level of the system. Does the linux kernel option actually do anything? And if not why is it there.

          It doesn’t seem like that should be able to do anything, knowing what I do know about the IME

          • SaltyCheesecake@lemmy.fmhy.mlB
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 year ago

            Can’t check right now, but I think the option you saw in the kernel config is for a driver to interact with the ME. Intel Management Engine has an interface called HECI for firmware and operating systems to query status and get event messages. It probably is also used to configure other stuff like AMT remote management.

          • MigratingtoLemmy@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 year ago

            This is serious (and exciting) news to me. I need to take a look, do you have any resources that talk about this? Indeed, the kernel should not be able to do anything about ME, but what do I know, Kernel developers are much smarter than I am.