Three Laptop Makers Are Disabling Intel ME



/ 2 months ago

Three Laptop Makers Are Disabling Intel ME

For years now, security experts warned that Intel’s Management Engine (ME) is at risk of being exploited; ME allows administrators to remotely access a computer and is present within every Intel processor since 2008. Finally – after staying quiet during the period of concern – Intel last month admitted that ME is vulnerable to exploitation. As a result, PC makers are making moves to protect users from said vulnerability. Indeed, Dell, Purism, and Linux PC vendor System76 are all disabling Intel ME on their laptops.

Disabling Intel ME – Dell

According to Liliputing, Dell is offering three laptops with the option to disable Intel ME, for a price. Indeed, Dell lists the option as “Intel vPro™ – ME Inoperable, Custom Order”. The laptops that can come with Intel ME disabled are Dell Latitude 14 Rugged laptop, Dell Latitude 15 E5570 laptop, and Dell Latitude 12 Rugged tablet.

Disabling Intel ME – Purism

Purism is disabling Intel ME in all its new laptops. In addition, it is issuing a software update for existing laptops.

Todd Weaver, Founder and CEO of Purism, said:

“Disabling the Management Engine, long believed to be impossible, is now possible and available in all current Librem laptops, it is also available as a software update for previously shipped recent Librem laptops.”

Disabling Intel ME – System76

Like Purism, System76 is issuing a software update for all its affected existing laptops. The Company lists the following information regarding its Intel ME-disabling firmware update:

  • System76 will automatically deliver updated firmware with a disabled ME on Intel 6th, 7th, and 8th Gen laptops. The ME provides no functionality for System76 laptop customers and is safe to disable.
  • The roll out will occur over time and customers will be notified by email prior to delivery
  • You must run Ubuntu 16.04 LTS, Ubuntu 17.04, Ubuntu 17.10, Pop!_OS 17.10, or an Ubuntu derivative and have the System76 driver installed to receive the latest firmware and disabled ME on laptops*
  • System76 will investigate producing a distro-agnostic command line firmware install tool. Follow us on your preferred social network for updates.
  • System76 will not disable the ME on desktops but will provide updated ME firmware
  • Desktop customers will receive instructions for updating the ME via email as they are available

Topics: , , ,

Comments

2 Responses to “Three Laptop Makers Are Disabling Intel ME”
  1. jake says:

    Dell could have done the right thing and disabled Intel’s Management Engine on ALL computers sold to its’ customers. This should be the default. They can enable it for the very few people or organizations that need it (??).

    Maybe they’ll come around and put in the effort as the buying public becomes aware of this backdoor. They shouldn’t have to wait, however, for a public outcry. Currently they are knowingly shipping devices with backdoor access. Knowingly!

  2. AC says:

    There is a really significant opportunity here for the ARM fabs to take Intel’s cake away from them. They are foolish if they waste it.

Speak Your Mind

Tell us what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!