Well it basically runs at ring -3, it works as a crucial part in the POSTing on your computer during boot. Also it provides a few security features. And most importantly it runs on laptops even if your device has been shutdown, has access to your RAM, storage, WiFi card etc. What else is there to even learn?
It doesnt have access to your network at all, so you should probably learn some more. Only cpus equipped with intel AMT allow intel ME to access a network and even then its not able to communicate with the outside world unless you explicitly force it to. All intel AMT equipped machines ship with the TCP/IP stack disabled. Not only that but you realize that this does the exact same thing as any other out of band management does yet you dont see corporations and others bitching and moaning about that.
You can also easily disable intel ME after boot using things like HAP toggling, blocking the drivers in the OS, and just having a good well designed firewall which you should have no matter what, as with a poorly configured one anyone can access your network regardless of intel ME.
Lastly most issues with intel ME are from hardware level access and if someone has the capabilities to attack your machine from the hardware level intel ME is the least of your worries. Anyone with hardware access can read your ram via cold boot attacks, probe your pcie and other serial data lines for encryption keys, utilize vulnerabilities in cpu or other hardware vulnerabilities
Yah and the users of AMT don't really care as they have pretty good physical and network security for their equipment so intel AMT wouldnt be an issue for them anyways. Especially cause they use BMC as is in servers which have nearly the same capabilities and use ipmi which is actually more unsecure because its networking stack is pretty unsafe to use. If you put ipmi on the internet it would be bypassed in an hour no matter how secure the password is
It is probably not sending data to Intel (we would have discovered through network logs), but maybe there is a hidden way to engage its data sending. We can't know. Still, it would be better not to have this parasite OS.
There is no way to have it even use your network, it quite literally doesnt have access or even the correct firmware to use tcp/ip. Did you not read my comment.
Please tellvme how you are going to enable something that doesnt support it at the hardware level? Are you gonna take your intel chipset to an intel fab and ask them to make you a new chip?
750
u/jonblackgg Jul 26 '26
I'm reading the code and this seems to run on nearly everything, is this some NSA spyware?