Arch Linux

ANTONI

Member

Registered: 2020-04-10

Posts: 19

How much is me_cleaner able to limit Intel Management Engine?

I currrently use Broadwell CPU (5th gen.). I heard that me_cleaner is able to limit IME only to boot time here. However, this is not possible on newer processors.

After me_cleaner cuts the Management Engine’s firmware on newer processors, could they possibly still have a backdoor?

In terms of security which CPU is better? Intel, or AMD? AMD as far as I know also has an IME equivalent - PSP. Is it easier to remove or at least limit?

Last edited by ANTONI (2021-12-13 12:07:36)

LordRishav

Member

Registered: 2021-12-14

Posts: 1

Re: How much is me_cleaner able to limit Intel Management Engine?

In terms of security which CPU is better? Intel, or AMD? AMD as far as I know also has an IME equivalent - PSP. Is it easier to remove or at least limit?

AMD's PSP reportedly can be disabled (https://www.phoronix.com/scan.php?page= … ble-Option) and from what I've heard doesn't have networking capabilities as well. So it may be a better option if you want security.