On Sunday, October 3rd, 2021 at 12:23 PM, Sam Kuper sampablokuper@uclmail.net wrote:
Someone (a PhD student, maybe?) should make these questions the subject of a research project. Perhaps it has already been done. As I say, I'm a bit out of the loop just now.
I'm highly recommend this thesis about ME: https://depositonce.tu-berlin.de/bitstream/11303/4494/1/stewin_patrick.pdf
More info about Intel CSME: https://github.com/hardenedlinux/firmware-anatomy/blob/master/hack_ME/me_inf...
Risk assessment from enterprise security perspective: https://hardenedvault.net/2021/07/16/ciso-seceng_csme.html
regards Shawn