On Sun, Aug 30, 2015 at 5:49 PM, Jacob Appelbaum <jacob@appelbaum.net> wrote:

Intel has AMT and opaque microcode updates, other CPU vendors have similar fun hardware features.

Further reading regarding AMT from the FSF:

https://www.fsf.org/blogs/community/active-management-technology

Some Intel docs indicate that remote AMT requires their "LM" series lan controllers. The Intel programming guides and block diagrams indicate an ability to update (and perhaps by that to zero) the AMT and related firmware. Their general CPU microcode is signed. Didn't read far enough yet to tell the full scope of what is in their programming guides in these areas.