Re: Security? What "Security"?

Farley Flud  <ff@linux.rocks> wrote:

On Fri, 11 Oct 2024 14:52:47 -0000 (UTC), John McCue wrote:
>

 
Well I would say Gordon could be correct.  I say that due to
Intel ME and probably AMD SE:
 

>
The Intel ME can be disabled in the motherboard BIOS.  Whenever
I build a new machine it is one of the first things that I
disable.

No.  The interface that makes the ME visible to the operating system
can be disabled, but the ME is still down there doing whatever
undocumented things it does.  If it wasn't, the processor would never
be able to load the microcode in the first place.

Also, the Linux kernel can be configured and built without
the MEI driver by disabling CONFIG_INTEL_MEI, which is located
here:
>
drivers/misc/mei

Yes, this keeps the operating system from being able to talk to the
ME... but it doesn't stop the ME from doing whatever it does.
--scott

--
"C'est un Nagra. C'est suisse, et tres, tres precis."