this post was submitted on 25 Dec 2023
387 points (92.9% liked)

linuxmemes

20473 readers
1185 users here now

I use Arch btw

Sister communities:

Community rules

  1. Follow the site-wide rules and code of conduct
  2. Be civil
  3. Post Linux-related content
  4. No recent reposts

Please report posts and comments that break these rules!

founded 1 year ago
MODERATORS
[email protected]
[email protected]
387
meme (lemmy.world)
submitted 8 months ago by [email protected] to c/[email protected]
57 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 16 points 8 months ago (2 children)

IME is even worse than that. It runs on a supervisor processor in the chipset that has privileged access to the memory, peripherals, and CPU, and can run when the rest of the system is powered off. IME is how Intel AMT can serve as a KVM-over-IP, and just because you don't have a CPU with Vpro doesn't mean all the components aren't there for an exploited or backdoored ME firmware to remotely log your console or inject keystrokes.

[–] [email protected] 12 points 8 months ago

Apparently it can also read any decryption keys read by the cpu.

[–] [email protected] 1 points 8 months ago

Thanks for adding up!