Hacker News Reader

I want to be able to buy systems with an Opensource boot loader like Coreboot and no Intel management features at all. Plus with secure system calls in the cpu.

Please disable Intel boot guard for coreboot and work with the open source community.

That way we will have more secure systems.

View on HN

Coreboot uses proprietary blobs, so using it doesn't ensure running open source nor free code.

AFAIK these attacks had nothing to do with IME or proprietary UEFI.

Both you and madez are correct, although I still agree with the principle behind the original statement. IME (and the AMD and ARM equivalents) are a gaping security hole in all modern processors and that should terrify everyone who cares about security at all. Think about things like Meltdown and Spectre and that's in parts of the processor we can actually audit, now consider all the exploitable flaws that are lurking in things like IME that we (although presumably nation states can) can't audit.

Reply on news.ycombinator.com