lainchan / sec

Skulls/Libre

Unidentified · 2023-11-16 13:49
is it possible to build skulls/heads without intel me/proprietary blobs for machines that support libreboot, eg T400? how do I go about it?(USER WAS WARNED FOR THIS POST, You should always elaborate on your opinions rather than just spilling the soykaf.)
Jet Black · 2023-11-18 05:41
Unlike Libreboot, coreboot works fine with a CH314A programmer. Connect it to another computer, plug it into the rom chip, flash it. For reasons written below I recommend installing coreboot. Installing other distributions of coreboot AFTER you have installed it initially, does require just the ROM image and a tool like flashrom. I have no clue about heads, but for skulls isn't really much different to coreboot, I'd recommend building your own coreboot ROM. Download the source code, verify the sourc code with the devs gpg key, compile the toolchain, do a make menuconfig (this is just like with Linux, only with much less options, read the documentation throughly and only change something about the options, you know, go into the mainboard section and select lenovo->t400->the mb size of your rom for that), compile it, install it with flashrom. I strongly recommend building coreboot with proprietary binary blobs. Those people who made libreboot, just were blind in their freetardism, removing everything that wasn't available in source code, but not caring about security or privacy. Those proprietary blobs are there for a reason! Not only greatly increases that power consumption and other smaller features, but it does fix security holes in the processor or even the ISA. x86 is an ISA with many vulnerabilities and it is retarded to remove those bits because licensing issues, as it drastically damages the security. I am not advocating for the use of Intel ME, I run a machine too, without it, for sexcuriosity reasons, but proprietary binary blobs are necessary in the current year. Of course it's your choice if you want to run machine free of proprietary code or as secure as possible, both is valid, but be warned. Another thing, libreboot people don't seem to understand, that putting a bootloader into your BIOS is quite retarded. Sure, "true full disk encryption", but if somebody tampers with your bootloader already, what stops him from analyzing your hard drive with forensic tools outside of your PC? You just add unnecessary attack surface (and compatibility with literally every other OS than Linux, try booting OpenBSD or 9front, it's almost impossible), just use SeaBIOS
Hitomi · 2024-04-20 07:21
>>22900 It is technically possible to build it for those older devices, however according to this GH issue: https://github.com/linuxboot/heads/issues/925 Those devices do not support hardware virtualisation and have no dedicated TPM, so there is really no point in porting heads to those. >>22910 >Unlike Libreboot, coreboot works fine with a CH314A programmer. Both ch341a and other spi programmers work with libreboot as well as stock coreboot. It is just that Leah Rowe does not recommend using ch341a since it is very easy to brick the flash chip due to voltage bug on cheaper versions of ch341a (this can be sometimes fixed although those are not very reliable at the first place). The other thing is that ch341a does not provide enough power for the flash chip, there Heads maintainers mention the use of external power supply, like those AMS1117 modules. On certain T/X60 models you have to plug the charger to the motherboard (without turning it on obviously) since even raspberry may not supply enough power for those (thats what I had to do when flashing T60).
Tyrell Wellick · 2024-04-20 09:51
>>22910 Apparently Apple thought Intel ME was too invasive and made Intel make a custom version that is more stripped down. If Intel ME is needed for a chip to run is it possible to get ahold of the Apple version? I also had seen a video of a guy that works for Intel that said Intel ME only has access to the first RAM slot which makes me wonder if that were still true what happens if you leave the first RAM slot empty? Would Intel ME be unable to run?
Hacker · 2024-11-27 19:04
>>23905 What would happen if you put a non intel or supported wifi card into the PCIe WiFi card slot would it nerf it or would it require 6 million volts?
Pris · 2024-11-27 23:40
>>25319 I've actually never thought about this. But I've shoved all sorts of things into mini-pice slots and it either works or it doesn't. If it's the right slotting and key, it's made for the slot, I wouldn't worry. And if the lane supports it then the second step is the OS has to have the drivers for it.