[guelo]

The only firewall I trust is a hardened openbsd running pf.

[squarefoot]

Hopefully on a non ME plagued platform.

[mulmen]

You can just disable ME in the BIOS to mitigate this right?

[Fnoord]

PC Engines APU [1] and APU2 [2] come with Coreboot as firmware. As do various competitors [3]

[1] http://www.pcengines.ch/apu.htm

[2] http://www.pcengines.ch/apu2.htm

[3] https://store.netgate.com/ADI/RCC-VE-2440.aspx

[Houshalter]

How?

[mulmen]

Hmm, looks like I conflated the AMT and ME. This does make it significantly worse.