| >I think their processors are not including management engine, so you are safe to buy one. There are no new AMD or Intel processors that come without ST (formerly PSP) or CSME (formerly ME). >The management engine that included in chipsets can be switched off permanently. This is factually incorrect. me_cleaner cannot neutralize or disable modern CSME, there is no way to verify the HAP bit does anything at all, nor that the included TCP/IP stack on the Minix OS cannot accept remote commands to disable the HAP bit, if set. To our current knowledge, only the onboard GbE controller is accessible to CSME's TCP/IP stack, but we're working with extremely limited information. These are closed-source, hardened opaque-boxes that are deliberately designed to be inauditable and tamper-proof. Adding firmware support for other ethernet controllers or wireless cards would conceivably be trivial. >In general usage, it does not matter while you use third party controlled CAs, distro repositories and automatic updates, I compile from source. OS, drivers, browser - all of it. I don't care if you think this is "unrealistic for the average user", my objective is not to have the security model that the average user has. >not speaking about microsoft, google, nvidia, valve, mozilla spyware that can do anything with your data anytime they (or US/EU government agencies) want. I do not run Windows, I do not use chromium (or firefox) based browsers, I do not use a discrete GPU, I don't have anything remotely gaming related (like steam) installed. What I do have is a constitutional right to privacy that does not end where my CPU begins, and an unshakeable resolve wherein I refuse to voluntarily cede that right to privacy just because so many others do. |
Anger might help, if channeled properly into lobbying your representatives in Congress. Making up imaginary constitutional rights to a DRM-free PC won't help at all, though. Intel and AMD have the right to shove their spyware into their silicon, just as Microsoft has the right to shove theirs into their OS. You have the right to decline to buy it. Your rights end there, given that nothing they are doing is actually illegal.
That last part could change, which is why I recommend lobbying. It should be completely illegal to use a Wintel PC for a vast number of things that people are currently using them for, from healthcare to government services to military applications. If we can convince Congress of the threat, they can pass legislation that will wreck the business model of anyone who doesn't give the user -- or at least the admin -- control over what information the PC sends out and what it can receive. They will change their tune in a hurry when that happens.