Shortly after disclosure of the security gaps found in Intel Management Engine, several manufacturing companies are reacting by completely disabling this technology from their new products.
Intel Management Engine is a technology that many are characterized as an operating system embedded within a processor. The work of the ME is autonomous from the basic operating system, with its own file system, memory management and much more. Therefore, the hacker can easily gain full access to the user's computer. Below are the processors for:
• 6th, 7th and 8th generation Intel Core Processor Family
• Intel Xeon Processor E3-1200 v5 and V6 Product Family
• Intel Xeon Processor Scalable Family
• Intel Xeon Processor W Family
• Intel Atom C3000 Processor Family
• Apollo Lake Intel Atom Processor E3900 Series
• Apollo Lake Intel Pentium Processors
• Intel Celeron G, N, and J series Processors
The first company to decode technology is Purism, which is now using a new technique discovered by Positive Technologies researchers to protect its customers.
The second company is System76 which sells computers with a custom operating system Linux. The versions that need to be upgraded firmware are Ubuntu 16.04 LTS, Ubuntu 17.04, Ubuntu 17.10 and Pop! _OS 17.10.
A similar policy has followed Dell which gives the consumer the option to buy a computer without even Intel Management Engine.