This might be of interest, since Intel ME-related issues seem to be an obstacle for Qubes-certified hardware:
http://hardenedlinux.org/firmware/2016/11/17/neutralize_ME_firmware_on_sandybridge_and_ivybridge.html Discussion on Hacker News: https://news.ycombinator.com/item?id=13056997 A couple of things from the Hacker News discussion: - Suggested that the same technique works for Skylake (and I assume Haswell). - Someone successfully applied the cleaner tool to the BIOS on their random desktop motherboard (Asus Z68) they had sitting around. Perhaps this can be applied across a lot of systems. Hopefully this facilitates moving past using Core 2 Duos for ME-less systems. Anyone know if more recent CPU generations, like Haswell or Skylake, have an in-CPU ME ROM that still allows ME to have significant functionality even if the BIOS is neutralized? Eric -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/b11f2a24-47bc-4ba0-8317-5bf1838ccc83%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
