Am 06.06.2016 um 15:46 schrieb Zrubi:
> Modern BIOS/EFI systems may have a remote management interface. (Dell
> and Lenovo business models surely has)

At least in the case of Lenovo that is not necessarily true. Even the P
series can be ordered in non-vPro configuration. And even if you did you
will find FRU numbers for replacement parts that are lacking vPro
capabilities. You can reduce the attack surface by actually configuring
that stuff (thus generating keys of appropriate sizes) instead of having
to trust the firmware to correctly disable it.

> The same apply for ~all the Intel v-pro features.

The vPro features need support from peripherals. If you don't use an
Intel NIC it won't work.


Achim

FRU... I really like that mainframe tech-speak -- Field Replacable Unit,
something that was probably invented when the Druids built Woodhenge and
had to bring in new stones.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/25444b10-66c4-ccb4-ac62-96f9b103b254%40noses.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to