The ME is a complete computer CPU (processor), hidden inside the chip you think runs your computer. In fact the ME can run the computer even when it is "turned off" normally, as long as it's still plugged in or on battery power. It can communicate with the rest of the network (including the internet) without your knowledge or consent.
The following is taken from "Intel Management Engine" on Wikipedia:
The Management Engine is often confused with Intel AMT. AMT is based on the ME, but only available on processors with vPro. It enables owners remote administration of their computer[12], like turning it on or off and reinstalling the operating system. However, the ME itself is built into all Intel CPUs since 2008, not only those with AMT. While AMT can be unprovisioned by the owner, there is no official, documented way to disable the Management Engine (ME). Research by Youness Alaoui found that Intel delivers the processors to manufacturers with the Intel ME turned off and the ability to permanently set changes at a later date.[13][not in citation given][14][not in citation given] Thus, the ME is always on unless[not in citation given] it is not enabled at all by the OEM.[15][16]Critics like the Electronic Frontier Foundation (EFF) and security expert Damien Zammit accuse the ME of being a backdoor and a privacy concern.[17][4] As of 2017 Google was attempting to eliminate proprietary firmware from its servers and found that the ME was a hurdle to that.[16] Zammit stresses that the ME has full access to memory (without the parent CPU having any knowledge); has full access to the TCP/IP stack and can send and receive network packets independent of the operating system, thus bypassing its firewall.[18] Intel has responded by saying that "Intel does not put back doors in its products nor do our products give Intel control or access to computing systems without the explicit permission of the end user."
Thanks for Wikipedia ref on ME and AMT.
More from the article:
“As Intel has confirmed[44] the ME contains a switch to enable government authorities such as the NSA to make the ME go into High-Assurance Platform (HAP) mode after boot. This mode disables all of ME’s functions. It is authorized for use by government authorities only and is supposed to be available only in machines produced for them.”
Really? Why?
Do the AMD cpus have the same “feature”?