Re: Matryoshka dolls
Certain implementations can be disabled by removing just enough of the code to stop it from running. You have to be very careful as some of these machines shut down after 30 minutes if the ME is in a particular state of not being able to boot.
See ME Cleaner for details. It's not for the faint of heart but I was going to stop using this Lenovo if I couldn't rid myself of at least the ME code running at ring -3 so I had very little to lose. With a dump of both SPI chips, I could always restore it to factory state anyway.