Intel Management Engine cleaner
This is admittedly unfounded speculation, but if the ME were compromised, one of the most valuable things an attacker would want would be AES keys. So _IF_ this binary blob is up to no good, we should expect one of its tasks to jot down AES keys (remember, intel has had specialized AES instructions for a while now) and hide them somewhere for later retrieval.<p>Perhaps it would behoove people to run a &quot;keyscrubber&quot; daemon that constantly generates random numbers and AES-encrypts a few kb of data and sends it to &#x2F;dev&#x2F;null. _IF_ the ME is jotting down keys, and _IF_ there is only a finite amount of space for it to store them, such a daemon might be able to flush out <i>real</i> keys and overwrite them with junk to hamper any retrieval efforts.<p>Again, two big hypotheticals, but, if it were stealing keys, the buffer would have to be pretty small, otherwise people could eventually detect it changing sizes or hashes in NVM. I wouldn&#x27;t expect such a thing in standard redable NVM anyway, it&#x27;s probably on a die somewhere and only a few kb.