CPU can be owned via USB

[Masa_1964]

 

The Intel Management Engine (IME) is a component of virtually every Intel CPU released after 2008. Think of it as a CPU on top of a CPU; it does tasks separate from the main operating system while the computer is in use. Intel argues that it can be used to do remote administration tasks, although the likes of the EFF have long argued that having a “black box” that can control networking and hardware, even when the computer is switched off, represents a major security and privacy risk.

 

 

 

https://thenextweb.com/security/2017/11/09/researchers-find-almost-every-computer-intel-skylake-cpu-can-owned-via-usb/

 

[Xernicus]

This is why I don't use vPro functions in my organization. It's a nice AIO solution for management, but it's hard to ensure security unless it's an in-house solution or there's a contract involved where the provider has something to lose. We use PuTTY and a network share with diagnostic tools, scripts, etc. 

[Masa_1964]

remeber if u have pc/or any device with direct contact on hw on any line u wurneable to direct contact even no enable on lan wake up

[Vanaraud]

That´s why Google tries to disable the Minix and secure laptop prototypes discard Intel CPU-s.