3rd gen vs 10th gen - Intel ME

[initialize]

@renehoj

You are mixing the features of Intel management Engine and Intel Active Management Technology, only the vPro line of CPUs have the AMT functions. IME can’t be disabled, but you can disable AMT in the bios.

I agree.

The Management Engine is often confused with Intel AMT (Intel Active Management Technology). AMT runs on the ME, but is only available on processors with vPro. AMT gives device owners remote administration of their computer, such as powering it on or off, and reinstalling the operating system.

https://en.wikipedia.org/wiki/Intel_Management_Engine#Difference_from_Intel_AMT

But Intel ME has still following possibilities, has’nt it?

@initialize

Management Engine […]

• Shares flash with the BIOS but is completely independent from the main CPU
• Can be active even when the system is hibernating or turned off (but connected to mains)
• Has a dedicated connection to the network interface
• Can intercept or send any data without main CPU’s knowledge

The PCH [Platform Controller Hub] carries almost all communication between the
processor and external devices. Therefore, Intel ME has access to almost all data on
the computer. The ability to execute third-party code on Intel ME would allow for a
complete compromise of the platform.

https://www.blackhat.com/docs/eu-17/materials/eu-17-Goryachy-How-To-Hack-A-Turned-Off-Computer-Or-Running-Unsigned-Code-In-Intel-Management-Engine-wp.pdf

I wonder why there is no known case of exploitation in the wild.