Hacker News Reader

Your reasoning has merit, of course. And, that's a sad commentary on the current state of affairs, in which one cannot trust a firewall appliance to do its job.

Perhaps the movement for open source hardware should focus on minimal security appliances.

> How much do you trust that firewall?

Not very much after seeing some of the Shadow Brokers revelations.

The only firewall I trust is a hardened openbsd running pf.

Hopefully on a non ME plagued platform.

You can just disable ME in the BIOS to mitigate this right?

How?

Hmm, looks like I conflated the AMT and ME. This does make it significantly worse.

PC Engines APU [1] and APU2 [2] come with Coreboot as firmware. As do various competitors [3]

[1] http://www.pcengines.ch/apu.htm

[2] http://www.pcengines.ch/apu2.htm

[3] https://store.netgate.com/ADI/RCC-VE-2440.aspx