System76 Continues Refining Their Pop!_OS

[starshipeleven]

slightly off topic - can ME be disabled on Thinkpads? I've got a couple of them, a T440 and a T450....

only "neutralized", with the https://github.com/corna/me_cleaner
as the broadwell ME does not have the HAP bit (a setting to actually disable the ME), so the me_cleaner script can only delete all modules from the ME. This means that the ME is still "running", but it won't be able to communicate with the outside world (as all modules to do that are removed).

Having a hardware SPI flasher (to backup and restore the original UEFI even if the board does not boot anymore) is warmly recommended, also reading and understanding the me_cleaner wiki https://github.com/corna/me_cleaner/wiki is a good thing to do before attempting it.