How to verify boot firmware integrity if you prioritize neutralizing Intel ME? (ycombinator.com)