34 private links
Tool for partial deblobbing of Intel ME/TXE firmware images - How does it work?
The official HECI method for disabling Intel ME
The HAP disabling method: a more secure option
me_cleaner supports two ways to disable Intel ME:
by removing the non-fundamental partitions and modules from the Intel ME firmware
by setting the HAP (Intel ME >= 11) or the AltMeDisable (Intel ME < 11) bit in the flash descriptor
Some of the claims we plan to cover:
• It's a backdoor made for NSA and serves no useful purpose
• It is always on even if the PC is turned off
• It can read all data on PC/spy on the user
• It can't be disabled
• It can lock the PC with a command sent over the air
• It a black box which can't be audited because it's closed source
• End users can't do anything about it.
You can audit it even without source code (and maybe even without reverse engineering).
The firmware size is greatly reduced:
Original Modified
Generation 2 1.5 MiB / 5 MiB 84 KiB
Generation 3 2 MiB / 6.6 MiB 330 KiB
What stuff of ME things are working and what not