Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 14 submissions in the queue.

How-To: Disabling the Intel Management Engine

posted by martyb on Monday October 16 2017, @01:50AM   Printer-friendly
from the b-b-b-but-I-have-an-AMD! dept.

The Mighty Buzzard writes:

We've covered that it was possible and in theory how to do so before but I think having a proper How-To written up will save even us nerd types some hair pulling. Here's what you'll need to start:

  • an Intel-CPU-based target PC — that does not have Boot Guard enabled — on which you wish to disable the IME;
    • the target PC may be running an OEM BIOS (such as AMI, Dell etc.), or coreboot;
  • a Raspberry Pi 3 Model B single board computer ('RPi3'), for use as an external flash programmer;
  • a spare >= 8GB microSD card (to hold the 64-bit Gentoo O/S image we will use for the RPi3);
  • an appropriate IC clip for your target PC's flash chip, e.g.:
    • a Pomona 5250 for SOIC-8 chips;
    • a Pomona 5208 for unsocketed DIP-8 chips, or
    • a Pomona 5252 for SOIC-16 chips;
  • 8 female-female connector wires (to attach the appropriate clip to the RPi3's GPIO header);
  • a maintenance manual for your target PC, where available, to assist in safe disassembly / reassembly; and
    • whatever tools are stipulated in the above.

Given the above list, you'll obviously need to be comfortable identifying and connecting an IC clip to your flash chip. So, it's not a procedure for most grandmothers but neither is especially complex or difficult for the vast majority of desktop machines (laptop/other difficulty will vary widely). Also, the guide explicitly does not cover PLCC or WSON flash chips, so you're out of luck here if your board has such.

Happy hacking, folks.

Original Submission

 
This discussion has been archived. No new comments can be posted.
How-To: Disabling the Intel Management Engine | Log In/Create an Account | Top | 29 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 5, Insightful) by takyon on Monday October 16 2017, @01:59AM (21 children)

    by takyon (881) <reversethis-{gro ... s} {ta} {noykat}> on Monday October 16 2017, @01:59AM (#582870) Journal

    Will you buy superior price/performance x86 chips, or pin your hopes on SoylentNews favorite RISC-V to break the monopoly?

    Does this mean Intel is a better buy than AMD?

    Is this just a ruse to get you to disable the management engine you know about?

    --
    [SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]
    Starting Score:    1  point
    Moderation   +3  
       Insightful=3, Disagree=1, Total=4
    Extra 'Insightful' Modifier   0  
    Karma-Bonus Modifier   +1  
    Total Score:   5  

  • (Score: 3, Informative) by Anonymous Coward on Monday October 16 2017, @02:19AM

    by Anonymous Coward on Monday October 16 2017, @02:19AM (#582872)

    Using a turquoise case is the only way to shut down the one the lizard people put in there.

  • (Score: 5, Informative) by The Mighty Buzzard on Monday October 16 2017, @02:22AM (13 children)

    by The Mighty Buzzard (18) Subscriber Badge <themightybuzzard@proton.me> on Monday October 16 2017, @02:22AM (#582873) Homepage Journal

    Well, RISC-V is years away from giving the world a chip comparable with even the low-end x86_64 chips, so that's out. ARM would be a better bet but while finding a respectable ARM chip isn't too hard, finding a board that gives you options comparable to a modern desktop is exceedingly difficult, so that's out as well for a bit longer. If you need a desktop this year, you have no realistic choice but x86_64 unless you're willing to pay thousands of dollars extra for an underperforming Talos II.

    --
    My rights don't end where your fear begins.

  • (Score: 2) by isostatic on Monday October 16 2017, @10:35AM (3 children)

    by isostatic (365) on Monday October 16 2017, @10:35AM (#582949) Journal

    Is this just a ruse to get you to disable the management engine you know about?

    Unless they have some real spy stuff infecting every chip like Uraei or similar, somebody would be able to see traffic passing through their router

    • (Score: 3, Funny) by takyon on Monday October 16 2017, @10:47AM (2 children)

      by takyon (881) <reversethis-{gro ... s} {ta} {noykat}> on Monday October 16 2017, @10:47AM (#582953) Journal

      The chips use an internal neutrino router to communicate directly with the NSA.

      --
      [SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]

      • (Score: 1, Funny) by Anonymous Coward on Monday October 16 2017, @11:25PM (1 child)

        by Anonymous Coward on Monday October 16 2017, @11:25PM (#583214)

        Great, now I have to build a million gallon tank directly below my house just so I can see what the NSA is siphoning off!?! I have stuff to do this weekend!

        • (Score: 2) by Wootery on Tuesday October 17 2017, @09:55AM

          by Wootery (2341) on Tuesday October 17 2017, @09:55AM (#583383)

          Try siphoning the stream of bile from YouTube comments. You'll have it full in no time.

  • (Score: 2) by crafoo on Tuesday October 17 2017, @02:04AM (1 child)

    by crafoo (6639) on Tuesday October 17 2017, @02:04AM (#583265)

    Days like this I really miss my Amiga. Assembly was more fun on it too.

    • (Score: 1) by anubi on Tuesday October 17 2017, @04:08AM

      by anubi (2828) on Tuesday October 17 2017, @04:08AM (#583306) Journal

      That's the reason I stay with my simple stuff.

      I do not need to refresh a HD screen 60 FPS, but I *must* be able to trust the thing.

      If I can't trust it, I am really afraid to connect anything really important to it.

      I'd be more comfortable knowing my systems are running Arduinos than running something someone else can pwn me anytime he wants.

      --
      "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]