home.social

#intelme — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #intelme, aggregated by home.social.

  1. @argv_minus_one

    I agree but on one point: computers are as good as their hardware and software combined (the old saying about the weakest chain link comes to mind). So we should really think about working on replacing the hardware, before we are irremediably locked out of running what software we want.

    #x86 #bigtech #drm #web #google #intel #amd #apple #embraceextendexinguish #intelme #amdpsp

  2. @argv_minus_one

    I agree but on one point: computers are as good as their hardware and software combined (the old saying about the weakest chain link comes to mind). So we should really think about working on replacing the hardware, before we are irremediably locked out of running what software we want.

    #x86 #bigtech #drm #web #google #intel #amd #apple #embraceextendexinguish #intelme #amdpsp

  3. @argv_minus_one

    I agree but on one point: computers are as good as their hardware and software combined (the old saying about the weakest chain link comes to mind). So we should really think about working on replacing the hardware, before we are irremediably locked out of running what software we want.

    #x86 #bigtech #drm #web #google #intel #amd #apple #embraceextendexinguish #intelme #amdpsp

  4. @argv_minus_one

    I agree but on one point: computers are as good as their hardware and software combined (the old saying about the weakest chain link comes to mind). So we should really think about working on replacing the hardware, before we are irremediably locked out of running what software we want.

    #x86 #bigtech #drm #web #google #intel #amd #apple #embraceextendexinguish #intelme #amdpsp

  5. Writen using #FreeBSD on #thinkpad t460

    What's good:
    * No system load at all! All feels logical and snappy
    * Good pkg system, I like the tips after package install
    * Solid installer, base image is only 500MB (~150MB compressed)

    What's bad:
    * Screen brightness control does not work out of the box
    * Reading SD cards can be pain due poor exfat and SD-slot support
    * Takes significantly longer to boot

    Neutral:
    * WiFi seems more stable, but I still accidentally need to restart networking
    * MATE style comes very basic, looks good after installing theme
    * No(?) SafeEyes package, WorkRave is way more annoying
    * unfortunately, @delta chat is not in packages due electron toolchain

    Also; I went trough hell updating lenovo #firmware, which is only
    supported on wingdows (g intended) so I have experience to compare.

    Sadly, lenovo does not support firmware updates for my laptop anymore.
    Interestingly #IntelME firmware for t460s laptop seems to work.

    !
    This Is probably my 100th post <3
    !

  6. Writen using #FreeBSD on #thinkpad t460

    What's good:
    * No system load at all! All feels logical and snappy
    * Good pkg system, I like the tips after package install
    * Solid installer, base image is only 500MB (~150MB compressed)

    What's bad:
    * Screen brightness control does not work out of the box
    * Reading SD cards can be pain due poor exfat and SD-slot support
    * Takes significantly longer to boot

    Neutral:
    * WiFi seems more stable, but I still accidentally need to restart networking
    * MATE style comes very basic, looks good after installing theme
    * No(?) SafeEyes package, WorkRave is way more annoying
    * unfortunately, @delta chat is not in packages due electron toolchain

    Also; I went trough hell updating lenovo #firmware, which is only
    supported on wingdows (g intended) so I have experience to compare.

    Sadly, lenovo does not support firmware updates for my laptop anymore.
    Interestingly #IntelME firmware for t460s laptop seems to work.

    !
    This Is probably my 100th post <3
    !

  7. Writen using #FreeBSD on #thinkpad t460

    What's good:
    * No system load at all! All feels logical and snappy
    * Good pkg system, I like the tips after package install
    * Solid installer, base image is only 500MB (~150MB compressed)

    What's bad:
    * Screen brightness control does not work out of the box
    * Reading SD cards can be pain due poor exfat and SD-slot support
    * Takes significantly longer to boot

    Neutral:
    * WiFi seems more stable, but I still accidentally need to restart networking
    * MATE style comes very basic, looks good after installing theme
    * No(?) SafeEyes package, WorkRave is way more annoying
    * unfortunately, @delta chat is not in packages due electron toolchain

    Also; I went trough hell updating lenovo #firmware, which is only
    supported on wingdows (g intended) so I have experience to compare.

    Sadly, lenovo does not support firmware updates for my laptop anymore.
    Interestingly #IntelME firmware for t460s laptop seems to work.

    !
    This Is probably my 100th post <3
    !

  8. Writen using #FreeBSD on #thinkpad t460

    What's good:
    * No system load at all! All feels logical and snappy
    * Good pkg system, I like the tips after package install
    * Solid installer, base image is only 500MB (~150MB compressed)

    What's bad:
    * Screen brightness control does not work out of the box
    * Reading SD cards can be pain due poor exfat and SD-slot support
    * Takes significantly longer to boot

    Neutral:
    * WiFi seems more stable, but I still accidentally need to restart networking
    * MATE style comes very basic, looks good after installing theme
    * No(?) SafeEyes package, WorkRave is way more annoying
    * unfortunately, @delta chat is not in packages due electron toolchain

    Also; I went trough hell updating lenovo #firmware, which is only
    supported on wingdows (g intended) so I have experience to compare.

    Sadly, lenovo does not support firmware updates for my laptop anymore.
    Interestingly #IntelME firmware for t460s laptop seems to work.

    !
    This Is probably my 100th post <3
    !

  9. Writen using #FreeBSD on #thinkpad t460

    What's good:
    * No system load at all! All feels logical and snappy
    * Good pkg system, I like the tips after package install
    * Solid installer, base image is only 500MB (~150MB compressed)

    What's bad:
    * Screen brightness control does not work out of the box
    * Reading SD cards can be pain due poor exfat and SD-slot support
    * Takes significantly longer to boot

    Neutral:
    * WiFi seems more stable, but I still accidentally need to restart networking
    * MATE style comes very basic, looks good after installing theme
    * No(?) SafeEyes package, WorkRave is way more annoying
    * unfortunately, @delta chat is not in packages due electron toolchain

    Also; I went trough hell updating lenovo #firmware, which is only
    supported on wingdows (g intended) so I have experience to compare.

    Sadly, lenovo does not support firmware updates for my laptop anymore.
    Interestingly #IntelME firmware for t460s laptop seems to work.

    !
    This Is probably my 100th post <3
    !

  10. There's a page on me_cleaner GitHub started in 2016. where people still post results with motherboards they have. The fact it is being updated to this day IMO speaks for itself:

    me_cleaner status

    #BIOS #UEFI #firmware #IntelME

  11. There's a page on me_cleaner GitHub started in 2016. where people still post results with motherboards they have. The fact it is being updated to this day IMO speaks for itself:

    me_cleaner status

    #BIOS #UEFI #firmware #IntelME

  12. After preparing the modified image with me_cleaner, the next step was flashing it. Only the ME region should be written back, leaving the rest of the BIOS untouched. With FPT, this is done using a specific command-line option that limits the operation to that region.

    Some motherboards have an FDO (Flash Descriptor Override) jumper that temporarily unlocks ME access. On this board, the jumper had to be shorted during flashing; otherwise, FPT refused to write. It is unclear how the manufacturer’s own tool was able to flash ME before, possibly through another privileged path.

    After the modified ME firmware was successfully written, the system rebooted normally. It worked fine as long as the FDO jumper stayed shorted. Once the jumper was removed, the next boot showed a HECI error on the POST screen, requiring a manual confirmation with F1. Re-enabling the jumper made the error disappear again.

    #BIOS #UEFI #firmware #IntelME

  13. After preparing the modified image with me_cleaner, the next step was flashing it. Only the ME region should be written back, leaving the rest of the BIOS untouched. With FPT, this is done using a specific command-line option that limits the operation to that region.

    Some motherboards have an FDO (Flash Descriptor Override) jumper that temporarily unlocks ME access. On this board, the jumper had to be shorted during flashing; otherwise, FPT refused to write. It is unclear how the manufacturer’s own tool was able to flash ME before, possibly through another privileged path.

    After the modified ME firmware was successfully written, the system rebooted normally. It worked fine as long as the FDO jumper stayed shorted. Once the jumper was removed, the next boot showed a HECI error on the POST screen, requiring a manual confirmation with F1. Re-enabling the jumper made the error disappear again.

    #BIOS #UEFI #firmware #IntelME

  14. After preparing the modified image with me_cleaner, the next step was flashing it. Only the ME region should be written back, leaving the rest of the BIOS untouched. With FPT, this is done using a specific command-line option that limits the operation to that region.

    Some motherboards have an FDO (Flash Descriptor Override) jumper that temporarily unlocks ME access. On this board, the jumper had to be shorted during flashing; otherwise, FPT refused to write. It is unclear how the manufacturer’s own tool was able to flash ME before, possibly through another privileged path.

    After the modified ME firmware was successfully written, the system rebooted normally. It worked fine as long as the FDO jumper stayed shorted. Once the jumper was removed, the next boot showed a HECI error on the POST screen, requiring a manual confirmation with F1. Re-enabling the jumper made the error disappear again.

    #BIOS #UEFI #firmware #IntelME

  15. After preparing the modified image with me_cleaner, the next step was flashing it. Only the ME region should be written back, leaving the rest of the BIOS untouched. With FPT, this is done using a specific command-line option that limits the operation to that region.

    Some motherboards have an FDO (Flash Descriptor Override) jumper that temporarily unlocks ME access. On this board, the jumper had to be shorted during flashing; otherwise, FPT refused to write. It is unclear how the manufacturer’s own tool was able to flash ME before, possibly through another privileged path.

    After the modified ME firmware was successfully written, the system rebooted normally. It worked fine as long as the FDO jumper stayed shorted. Once the jumper was removed, the next boot showed a HECI error on the POST screen, requiring a manual confirmation with F1. Re-enabling the jumper made the error disappear again.

    #BIOS #UEFI #firmware #IntelME

  16. After preparing the modified image with me_cleaner, the next step was flashing it. Only the ME region should be written back, leaving the rest of the BIOS untouched. With FPT, this is done using a specific command-line option that limits the operation to that region.

    Some motherboards have an FDO (Flash Descriptor Override) jumper that temporarily unlocks ME access. On this board, the jumper had to be shorted during flashing; otherwise, FPT refused to write. It is unclear how the manufacturer’s own tool was able to flash ME before, possibly through another privileged path.

    After the modified ME firmware was successfully written, the system rebooted normally. It worked fine as long as the FDO jumper stayed shorted. Once the jumper was removed, the next boot showed a HECI error on the POST screen, requiring a manual confirmation with F1. Re-enabling the jumper made the error disappear again.

    #BIOS #UEFI #firmware #IntelME

  17. On most boards, BIOS and ME regions are protected in different ways. The first layer of protection is cryptographic signing, but there are also hardware-level locks. Some chipsets use special BIOS variables called Protected Range Registers that completely disable writes to certain regions.

    In other cases, the board must be switched into a special state called manufacturing mode before flashing is allowed. How this is done depends on the board — sometimes through a hidden jumper, sometimes through an internal setting.

    Working around these protections safely requires reading the exact documentation for the board and the chipset. The same method rarely works twice.

    On my board, the Intel ME firmware is generation 8.x, which is supported by me_cleaner. The manufacturer provides BIOS and ME together in a single image, so me_cleaner can process it directly.

    The FPT tool also supports the flash chip used here. That makes it possible to dump and reflash only the ME region, leaving the rest of the BIOS untouched.

    #BIOS #UEFI #firmware #IntelME

  18. On most boards, BIOS and ME regions are protected in different ways. The first layer of protection is cryptographic signing, but there are also hardware-level locks. Some chipsets use special BIOS variables called Protected Range Registers that completely disable writes to certain regions.

    In other cases, the board must be switched into a special state called manufacturing mode before flashing is allowed. How this is done depends on the board — sometimes through a hidden jumper, sometimes through an internal setting.

    Working around these protections safely requires reading the exact documentation for the board and the chipset. The same method rarely works twice.

    On my board, the Intel ME firmware is generation 8.x, which is supported by me_cleaner. The manufacturer provides BIOS and ME together in a single image, so me_cleaner can process it directly.

    The FPT tool also supports the flash chip used here. That makes it possible to dump and reflash only the ME region, leaving the rest of the BIOS untouched.

    #BIOS #UEFI #firmware #IntelME

  19. On most boards, BIOS and ME regions are protected in different ways. The first layer of protection is cryptographic signing, but there are also hardware-level locks. Some chipsets use special BIOS variables called Protected Range Registers that completely disable writes to certain regions.

    In other cases, the board must be switched into a special state called manufacturing mode before flashing is allowed. How this is done depends on the board — sometimes through a hidden jumper, sometimes through an internal setting.

    Working around these protections safely requires reading the exact documentation for the board and the chipset. The same method rarely works twice.

    On my board, the Intel ME firmware is generation 8.x, which is supported by me_cleaner. The manufacturer provides BIOS and ME together in a single image, so me_cleaner can process it directly.

    The FPT tool also supports the flash chip used here. That makes it possible to dump and reflash only the ME region, leaving the rest of the BIOS untouched.

    #BIOS #UEFI #firmware #IntelME

  20. On most boards, BIOS and ME regions are protected in different ways. The first layer of protection is cryptographic signing, but there are also hardware-level locks. Some chipsets use special BIOS variables called Protected Range Registers that completely disable writes to certain regions.

    In other cases, the board must be switched into a special state called manufacturing mode before flashing is allowed. How this is done depends on the board — sometimes through a hidden jumper, sometimes through an internal setting.

    Working around these protections safely requires reading the exact documentation for the board and the chipset. The same method rarely works twice.

    On my board, the Intel ME firmware is generation 8.x, which is supported by me_cleaner. The manufacturer provides BIOS and ME together in a single image, so me_cleaner can process it directly.

    The FPT tool also supports the flash chip used here. That makes it possible to dump and reflash only the ME region, leaving the rest of the BIOS untouched.

    #BIOS #UEFI #firmware #IntelME

  21. On most boards, BIOS and ME regions are protected in different ways. The first layer of protection is cryptographic signing, but there are also hardware-level locks. Some chipsets use special BIOS variables called Protected Range Registers that completely disable writes to certain regions.

    In other cases, the board must be switched into a special state called manufacturing mode before flashing is allowed. How this is done depends on the board — sometimes through a hidden jumper, sometimes through an internal setting.

    Working around these protections safely requires reading the exact documentation for the board and the chipset. The same method rarely works twice.

    On my board, the Intel ME firmware is generation 8.x, which is supported by me_cleaner. The manufacturer provides BIOS and ME together in a single image, so me_cleaner can process it directly.

    The FPT tool also supports the flash chip used here. That makes it possible to dump and reflash only the ME region, leaving the rest of the BIOS untouched.

    #BIOS #UEFI #firmware #IntelME

  22. Почти на любой не особо древней материнской плате можно использовать NVMe-диск M.2 вставленный через PCI-адаптер (PCI x4) в какой-нибудь из нескольких PCI-слотов (желательно с четырьмя и более каналами).
    В таком случае SATA-диски проигрывают по скорости в несколько раз, даже при наличии на материнской плате поддержки лишь древней второй версии #PCIe (PCIe v.2). На вполне конкретных примерах вместо 390 Мб/с наблюдается стабильные 1,7 Гб/с.

    Загрузка системы на NVMe
    Обычно, людей останавливает тот момент, что BIOS (точнее EFI) древних материнских платах не позволяет загружаться с NVMe-дисков, но это не является проблемой в случае таких систем как линуксы.
    Т.е. сама по себе система (ОС) может располагаться на nvme-диске, но загрузчик системы с #initramfs и образом ядра при этом на совершенно другом диске или же вообще на вынимаемом носителе.
    Для запуска системы нужен boot-раздел весьма скромный по размерам, хватит и 200-300 мегабайт. И располагаться таковой boot-раздел может хоть на flash'ке, хоть на SD-карточке или же быть разделом на SATA-диске.

    Как работает загрузка ОС?
    При включении питания #UEFI, оно же #EFI, читает записи в своей энергонезависимой памяти #NVRAM в поисках информации о том, какие EFI System Partition (ESP) на каких носителях следует использовать в каком порядке.
    #ESP это обычный раздел (partition) с файловой системой FAT16 или FAT32, которую прекрасно понимает EFI-система и на ней смотрит файлы являющиеся загрузчиками сродни: #rEFInd, #GRUB или #systemd-boot
    Так же, в качестве загрузчика может быть и специально собранный образ ядра ОС — например, т.н. EFI boot stub.

    Или проще добавить поддержку #NVMe?
    Иногда вполне реально научить комп грузиться с NVMe. Надо взять «Intel ME Tools» и снять дамп SPI Flash чипа на материнской плате, а в снятый образ EFI-системы добавить NVMe-драйвер (через «UEFI Tool»). После чего, уже пропатченный образ записывается обратно в SPI Flash чип на материнской плате.

    Доводилось такое выполнять, используя «Flash Programming Tool» (fpt.exe) из пакета «Intel ME Tools» и это не из под Windows, а из под #FreeDOS. Создавая загрузочную флешку через dd и докидывая на неё один файл «fpt.exe».
    Не сказать чтобы удобно, но дампить и шить из под Windows требует сперва установить и саму эту ОС и нужные драйвера от материнской платы вместе с Intel ME/AMT. И выходит, что в ряде случаев проще и быстрее лишние пару раз загрузиться с флешки.

    В более поздних версиях «Intel ME Tools» для более новых материнских плат (чипсетов, PCH) появился вариант «Flash Programming Tool» и для линухов. Ненаглядный «flashrom» в ряде случаев бесполезен, может снять дамп лишь с одного из чипов, коих обычно две штуки. Т.е. вместо 12 Мб сделает дамп лишь 8 Мб, то же FPT во время работы показывает с какого SPI-чипа сколько снято или в него записано.

    #nvme #nvmessd #linux #hardware #intel #IntelME #lang_ru @Russia
  23. Почти на любой не особо древней материнской плате можно использовать NVMe-диск M.2 вставленный через PCI-адаптер (PCI x4) в какой-нибудь из нескольких PCI-слотов (желательно с четырьмя и более каналами).
    В таком случае SATA-диски проигрывают по скорости в несколько раз, даже при наличии на материнской плате поддержки лишь древней второй версии #PCIe (PCIe v.2). На вполне конкретных примерах вместо 390 Мб/с наблюдается стабильные 1,7 Гб/с.

    Загрузка системы на NVMe
    Обычно, людей останавливает тот момент, что BIOS (точнее EFI) древних материнских платах не позволяет загружаться с NVMe-дисков, но это не является проблемой в случае таких систем как линуксы.
    Т.е. сама по себе система (ОС) может располагаться на nvme-диске, но загрузчик системы с #initramfs и образом ядра при этом на совершенно другом диске или же вообще на вынимаемом носителе.
    Для запуска системы нужен boot-раздел весьма скромный по размерам, хватит и 200-300 мегабайт. И располагаться таковой boot-раздел может хоть на flash'ке, хоть на SD-карточке или же быть разделом на SATA-диске.

    Как работает загрузка ОС?
    При включении питания #UEFI, оно же #EFI, читает записи в своей энергонезависимой памяти #NVRAM в поисках информации о том, какие EFI System Partition (ESP) на каких носителях следует использовать в каком порядке.
    #ESP это обычный раздел (partition) с файловой системой FAT16 или FAT32, которую прекрасно понимает EFI-система и на ней смотрит файлы являющиеся загрузчиками сродни: #rEFInd, #GRUB или #systemd-boot В качестве загрузчика может быть и специально собранный образ ядра ОС — т.н. EFI boot stub.

    Добавить поддержку NVMe?
    Вполне реально научить комп грузиться с NVMe. Надо взять «Intel ME Tools» b снять дамп SPI Flash чипа на материнской плате, а в снятый образ добавить NVMe-драйвер (через «UEFI Tool»). После чего, уже пропатченный образ записывается обратно в SPI Flash чип на материнской плате.

    Доводилось такое выполнять, используя «Flash Programming Tool» (fpt.exe) из пакета «Intel ME Tools» и это не из под Windows, а из под #FreeDOS. Создавая загрузочную флешку через dd и докидывая на неё один файл «fpt.exe».
    Не сказать чтобы удобно, но дампить и шить из под Windows требует сперва установить и саму эту ОС и нужные драйвера от материнской платы вместе с Intel ME/AMT. И выходит, что в ряде случаев проще и быстрее лишние пару раз загрузиться с флешки.

    В более поздних версиях «Intel ME Tools» для более новых материнских плат (чипсетов, PCH) появился вариант «Flash Programming Tool» и для линухов. Ненаглядный «flashrom» в ряде случаев бесполезен, может снять дамп лишь с одного из чипов, коих обычно две штуки. Т.е. вместо 12 Мб сделает дамп лишь 8 Мб, то же FPT во время работы показывает с какого SPI-чипа сколько снято или в него записано.

    #nvme #nvmessd #linux #hardware #intel #IntelME #lang_ru @Russia
  24. 🔋 Disabling the Intel Management Engine (ME) leads to battery draining in suspend mode due to modern standby (S0ix). In this guide, we will workaround this issue by setting up a suspend-then-hibernate policy.

    novacustom.com/prevent-battery

    #coreboot #ime #intelme #s0ix #laptopbattery

  25. 🔋 Disabling the Intel Management Engine (ME) leads to battery draining in suspend mode due to modern standby (S0ix). In this guide, we will workaround this issue by setting up a suspend-then-hibernate policy.

    novacustom.com/prevent-battery

    #coreboot #ime #intelme #s0ix #laptopbattery

  26. 🔋 Disabling the Intel Management Engine (ME) leads to battery draining in suspend mode due to modern standby (S0ix). In this guide, we will workaround this issue by setting up a suspend-then-hibernate policy.

    novacustom.com/prevent-battery

    #coreboot #ime #intelme #s0ix #laptopbattery

  27. 🔋 Disabling the Intel Management Engine (ME) leads to battery draining in suspend mode due to modern standby (S0ix). In this guide, we will workaround this issue by setting up a suspend-then-hibernate policy.

    novacustom.com/prevent-battery

    #coreboot #ime #intelme #s0ix #laptopbattery

  28. 🔋 Disabling the Intel Management Engine (ME) leads to battery draining in suspend mode due to modern standby (S0ix). In this guide, we will workaround this issue by setting up a suspend-then-hibernate policy.

    novacustom.com/prevent-battery

    #coreboot #ime #intelme #s0ix #laptopbattery

  29. My colleague's put together a collection of #Linux commands you can use to check the hardware and firmware on your machines, including #SecureBoot, #UEFI, #BIOS, #IntelME, #TPM, and more.

    Bookmark for reference!

    eclypsium.com/blog/linux-comma

  30. My colleague's put together a collection of #Linux commands you can use to check the hardware and firmware on your machines, including #SecureBoot, #UEFI, #BIOS, #IntelME, #TPM, and more.

    Bookmark for reference!

    eclypsium.com/blog/linux-comma

  31. My colleague's put together a collection of #Linux commands you can use to check the hardware and firmware on your machines, including #SecureBoot, #UEFI, #BIOS, #IntelME, #TPM, and more.

    Bookmark for reference!

    eclypsium.com/blog/linux-comma

  32. My colleague's put together a collection of #Linux commands you can use to check the hardware and firmware on your machines, including #SecureBoot, #UEFI, #BIOS, #IntelME, #TPM, and more.

    Bookmark for reference!

    eclypsium.com/blog/linux-comma

  33. My colleague's put together a collection of #Linux commands you can use to check the hardware and firmware on your machines, including #SecureBoot, #UEFI, #BIOS, #IntelME, #TPM, and more.

    Bookmark for reference!

    eclypsium.com/blog/linux-comma

  34. We try our best to bring back privacy, security and an eco-friendly life by setting up refurbished and secure laptops with Intel ME disabled! You can support us by purchasing a monocles laptop on store.monocles.eu/produkt/mono
    Or wait for our instructions on how to flash our modified BIOS/UEFI and disable Intel ME yourself (Sidenote: You need technical knowledge and special devices to disable Intel ME).
    (Part 4/4)

    #intelme #security #privacy #coreboot #monocles

  35. We try our best to bring back privacy, security and an eco-friendly life by setting up refurbished and secure laptops with Intel ME disabled! You can support us by purchasing a monocles laptop on store.monocles.eu/produkt/mono
    Or wait for our instructions on how to flash our modified BIOS/UEFI and disable Intel ME yourself (Sidenote: You need technical knowledge and special devices to disable Intel ME).
    (Part 4/4)

    #intelme #security #privacy #coreboot #monocles

  36. We try our best to bring back privacy, security and an eco-friendly life by setting up refurbished and secure laptops with Intel ME disabled! You can support us by purchasing a monocles laptop on store.monocles.eu/produkt/mono
    Or wait for our instructions on how to flash our modified BIOS/UEFI and disable Intel ME yourself (Sidenote: You need technical knowledge and special devices to disable Intel ME).
    (Part 4/4)

    #intelme #security #privacy #coreboot #monocles

  37. We try our best to bring back privacy, security and an eco-friendly life by setting up refurbished and secure laptops with Intel ME disabled! You can support us by purchasing a monocles laptop on store.monocles.eu/produkt/mono
    Or wait for our instructions on how to flash our modified BIOS/UEFI and disable Intel ME yourself (Sidenote: You need technical knowledge and special devices to disable Intel ME).
    (Part 4/4)

    #intelme #security #privacy #coreboot #monocles

  38. Why are the most computers #insecure and not #privacy friendly no matter what operating system you use? Yes, even with #linux or #bsd
    (Part 1/4)

    #intelme #security #monocles

    (Picture by alerkiv on Unsplash)