Given that all we can have will be circumstantial evidence, what could if presented sway you?

A => B != B => A

It is exactly what you just stated though

There are exploits so the nsa must have put them there

You know instead of the logical, mistakes happen and you can’t create perfect code

after snowden and wikilieaks that makes perfect logic to me, tbh

still, intel ME is a big security flaw

no matter if it was put by intel employees or whoever you want to blame

It can make sense but it is illogical to assume that 100% of the time it is due to government stuff. I don’t even know how a intel me exploit would help a government agency anyway

well im not even saying the ME exploit was the one the spooks put there

Less of a flaw than the alternative though tbh

what’s the alternative?

but its just weird that the security chip that gov orgs get to take out happens to be the exploit

or maybe it isnt

No security mitigation built into the chipset

but, intelME is not a security mitigation measure, it’s a remote control software

or, well… built for that

Intel me on newer devices has most major mitigations for stuff such as spectre and meltdown. Which is great cause with the code there it can perform better and more reliably without adding to the more accessible software.

More accessible to other software or attackers

Since when

since ever, that’s its purpose

it’s in the name… intel management engine

This is the stupidest support for a theory I have heard… but I can’t shame you for it cause it isn’t a wrong assumption if you know nothing about what intel me is applied to

bro u can look up the spec

I think you need to read first

I have

even intel employees say it’s a security nightmare that went out of control

This is unrelated to whether or not it is remote access firmware or if it is bugged by the government

given that all we can have will be circumstantial evidence, what could if presented sway you?

I read from Intel’s page and one of it’s features are oob management services but that isn’t everything it does

minus straight up leak or declassified info

Proof that it connects to any sites randomly

It is always on and can connect through Ethernet, easy to prove if it does

okay, that’s fair

You would just use a switch or such to monitor all traffic

i mean i thought it would be used if they got physical access not for passive monitoring