I'm tired of the CPU "management engine" etc. built-in malware/spyware situation. Someone needs to do something. Can Qubes spearhead a new movement?

[catacombs]

Qubes and Intel Management Engine

In the ifd (Intel Firmware Descriptor) region of the ROM you need to set a single bit, this will tell ME to shut down after the boot sequence is completed, this is the same as using me_cleaner with the -s option. The offset of the HAP bit changes with every version of ME, but if you know the offset of the version you are using, you can just dump the ROM and use a hex editor to set the bit. Because the bit is in the ifd region and doesn’t change the BIOS or ME regions, it can be done with any bi…