Hi, I’m very new to this stuff so I’m sorry if this is a stupid question. After doing some research, I discovered the existence of the Intel Management Engine(along with its AMD equivalent), which I’ve heard presents genuine security concerns as it could in theory be used as a hardware backdoor. So …

Sure, here you go: How to use IVPREP and 1VYRAIN and Disable Intel ME on a Lenovo x230

Look into KCMA-D8 and KGPE-D16.

[image] Newbie1: How concerned should I be? I don’t believe there is any reason to be overly concerned, you can use the HAP bit to disable ME on all intel processors.

In older machines, you could completely remove the IME. In more recent machines, you can disable many functions of IME - you are right that it cannot be “fully disabled”. But the functions that are left do not provide a real threat. As @renehoh says, probably not a reason to be overly concerned. …

renehoj renehoj. For the newcomer, can you describe where to find instructions to reset ‘hap’ bit. It is reasonable for me to search for it, but for newcomers who have a lot of other things on their mine.

In the ifd (Intel Firmware Descriptor) region of the ROM you need to set a single bit, this will tell ME to shut down after the boot sequence is completed, this is the same as using me_cleaner with the -s option. The offset of the HAP bit changes with every version of ME, but if you know the offset…

You should get a laptop that can run QubesOS and also can be coreboot’ed. Coreboot “neuters” the Intel ME (IME). IME still stays in the BIOS chip, however, most of its functions removed. Basically, after coreboot’ing, IME thinks that it is running while it is stuck on boot up sequence or something. …

Hi, just briefly: I have looked into all the various options how to deal with Intel ME just recently. I just don’t want anyone else to have the ability to basically control everything and anything on my computer, so I wanted to deal with it out of principle. This is my hardware that I paid for wit…

Worth mentioning: During the development of 1vyrain, not one single machine got bricked, much to the surprise and delight of the developers. And it seems really rare that 1vyrain bricks laptops in general now that it’s “out in the field” as well. In fact, in over a week of researching this, I have …

Btw: It appears to be true that most or almost all modern computers have backdoors similar to Intel ME and worse, and to my knowledge there is no fix for those so far, and there may never be. However there are a few first small laptop manufacturers that are starting to offer laptops that aim to be …

[image] Jack: The good news for you, if you want to try it, is that I have systematically written down every single tiny step of the process once I had figured it out; and then repeated it, following my own instructions, on a second X230, which also worked flawlessly. If you’re interested I can …

Qubes OS Forum

Qubes and Intel Management Engine

User Support General

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled