……安全流程。它确实和我预想的一样安全；当然漏洞肯定也是有的。在我看来真正的问题在于，他们能在多大程度上有效地缓解这些漏洞。[0] 强烈推荐读这本书来了解 ME 和 AMT：《Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine》，作者是 Xiaoyu Ruan，Apress 出版社（2014）
…security process. It's as secure as I thought it was; of course there are some vulnerabilities. The real issue to me is how effectively they mitigate it. [0] Highly recommended to learn about ME and AMT: Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine by Xiaoyu Ruan, published by Apress (2014)
……AMT 和其他安全应用运行的环境。手头正好有这几份资料，可能对大家有用：* 据我所知目前了解 ME 和 AMT 最好的去处（虽然已经是几年前的了）：《Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine》，作者是 Xiaoyu Ruan（Intel 平台工程部的安全研究员）。Apress（2014）* Qubes 创始人 Joanna Rutkowska 写的《Intel x86 considered harmful》（2015）http://invisiblethings.org/papers/2015/x86_harmful.pdf……
…AMT and other security applications run. Since I have them at my fingertips, perhaps these will be of use: * By far the best place to learn about ME and AMT that I found, though it's a few years old: Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine by Xiaoyu Ruan (security researcher with the Platform Engineering Group at Intel). Apress (2014) * Intel x86 considered harmful by Joanna Rutkowska, founder of Qubes (2015) http://invisiblethings.org/papers/2015/x86_harmful.pdf…
Agreed, Platform Embedded Security Technology Revealed by Xiaoyu Ruan should be the first thing anyone reads about it. Much else will become irrelevant or be revealed as ignorant.
……显然，对于有其他需求的电脑所有者来说，这本应是可选的，但不知怎的从来都不是这么回事……补充：如果你真的想深入了解它，别浪费时间了，直接看一手资料吧：Intel 平台工程部安全研究员 Xiaoyu Ruan 写的《Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine》
…Obviously, that could be optional for owners of the computers who have other needs, but somehow it never works out that way ... EDIT If you really want to learn about it, save your time and go to the source: Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine by Xiaoyu Ruan, a security researcher with the Platform Engineering Group at Intel
……UEFI 为其增加了许多功能，或者拨码开关。关于这一点的描述可以看这个帖子：https://news.ycombinator.com/item?id=15445826 如果你真的想深入了解，别浪费时间了，直接看一手资料：Intel 平台工程部安全研究员 Xiaoyu Ruan 写的《Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine》
…which UEFI adds many features, or dip switches. See this post for a description: https://news.ycombinator.com/item?id=15445826 If you really want to learn about it, save your time and go to the source: Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine by Xiaoyu Ruan, a security researcher with the Platform Engineering Group at Intel
ME 是一个独立芯片，和主 CPU 并行运行。你可没法通过 Windows 服务把它关掉 :) 想了解更多信息，我推荐读读 ME 的设计者和创造者写的《Platform Embedded Security Technology Revealed》这本书 [0]。[0]: https://link.springer.com/book/10.1007/978-1-4302-6572-6
ME is a separate chip running alongside main CPU. You can't disable it via Windows services :) I recommend Platform Embedded Security Technology Revealed book [0] from designers and creators of ME for further information. [0]: https://link.springer.com/book/10.1007/978-1-4302-6572-6
……安全流程。它确实和我预想的一样安全；当然漏洞肯定也是有的。在我看来真正的问题在于，他们能在多大程度上有效地缓解这些漏洞。[0] 强烈推荐读这本书来了解 ME 和 AMT：《Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine》，作者是 Xiaoyu Ruan，Apress 出版社（2014）
…security process. It's as secure as I thought it was; of course there are some vulnerabilities. The real issue to me is how effectively they mitigate it. [0] Highly recommended to learn about ME and AMT: Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine by Xiaoyu Ruan, published by Apress (2014)
……AMT 和其他安全应用运行的环境。手头正好有这几份资料，可能对大家有用：* 据我所知目前了解 ME 和 AMT 最好的去处（虽然已经是几年前的了）：《Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine》，作者是 Xiaoyu Ruan（Intel 平台工程部的安全研究员）。Apress（2014）* Qubes 创始人 Joanna Rutkowska 写的《Intel x86 considered harmful》（2015）http://invisiblethings.org/papers/2015/x86_harmful.pdf……
…AMT and other security applications run. Since I have them at my fingertips, perhaps these will be of use: * By far the best place to learn about ME and AMT that I found, though it's a few years old: Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine by Xiaoyu Ruan (security researcher with the Platform Engineering Group at Intel). Apress (2014) * Intel x86 considered harmful by Joanna Rutkowska, founder of Qubes (2015) http://invisiblethings.org/papers/2015/x86_harmful.pdf…
赞同，Xiaoyu Ruan 写的《Platform Embedded Security Technology Revealed》应该是任何想了解它的人首选的第一本书。其他很多内容要么变得无关紧要，要么会被发现根本就是在瞎扯。
Agreed, Platform Embedded Security Technology Revealed by Xiaoyu Ruan should be the first thing anyone reads about it. Much else will become irrelevant or be revealed as ignorant.
……显然，对于有其他需求的电脑所有者来说，这本应是可选的，但不知怎的从来都不是这么回事……补充：如果你真的想深入了解它，别浪费时间了，直接看一手资料吧：Intel 平台工程部安全研究员 Xiaoyu Ruan 写的《Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine》
…Obviously, that could be optional for owners of the computers who have other needs, but somehow it never works out that way ... EDIT If you really want to learn about it, save your time and go to the source: Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine by Xiaoyu Ruan, a security researcher with the Platform Engineering Group at Intel
……UEFI 为其增加了许多功能，或者拨码开关。关于这一点的描述可以看这个帖子：https://news.ycombinator.com/item?id=15445826 如果你真的想深入了解，别浪费时间了，直接看一手资料：Intel 平台工程部安全研究员 Xiaoyu Ruan 写的《Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine》
…which UEFI adds many features, or dip switches. See this post for a description: https://news.ycombinator.com/item?id=15445826 If you really want to learn about it, save your time and go to the source: Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine by Xiaoyu Ruan, a security researcher with the Platform Engineering Group at Intel
ME 是一个独立芯片，和主 CPU 并行运行。你可没法通过 Windows 服务把它关掉 :) 想了解更多信息，我推荐读读 ME 的设计者和创造者写的《Platform Embedded Security Technology Revealed》这本书 [0]。[0]: https://link.springer.com/book/10.1007/978-1-4302-6572-6
ME is a separate chip running alongside main CPU. You can't disable it via Windows services :) I recommend Platform Embedded Security Technology Revealed book [0] from designers and creators of ME for further information. [0]: https://link.springer.com/book/10.1007/978-1-4302-6572-6