News for hackers. Stuff that matters.

A comment on Experiments with disabling the ME on Sandybridge x230. Parent comment

Re:Experiments with disabling the ME on Sandybridge x230 by inyorgroove on Tuesday September 13, 2016 @03:35PM (#12491489)
Don't need a beagle bone black. I have flashed my laptop (T500) with a raspberry pi just fine.
[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by eloy on Tuesday September 13, 2016 @03:39PM (#12491528)
That's true. They don't officially support the Raspberry Pi because it needs proprietary drivers and thus breaks the "chain of trust" needed for flashing Libreboot.

It's a bit over-the-top paronoid to expect firmware modifying software in GPU drivers, but I understand their point.

[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by LukeShu on Tuesday September 13, 2016 @03:53PM (#12491641)
To call the binary blobs on the Pi "GPU drivers" is an understatement. The VC4 is running the full ThreadX operating system. The Pi is closer to a VC4 board with a secondary ARM coprocessor tacked on than it is to an ARM board.
[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by eloy on Tuesday September 13, 2016 @04:12PM (#12491809)
Oh wow, I didn't knew this. Will look into this, thanks.
[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by sliverstorm on Tuesday September 13, 2016 @05:09PM (#12492257)
All the same, is your adversary really going to use this to attack your machine? They'd have to predict a number of things quite in advance, as well as sneak an attack into the blob.
[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by inyorgroove on Tuesday September 13, 2016 @03:52PM (#12491634)
Hm, well I have always run it headless. Should be possible to make sure the GPU driver isn't ever loaded.
[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by erlehmann_ on Tuesday September 13, 2016 @04:11PM (#12491801)
> The Raspberry Pi boots from its GPU and only non-free software is currently available for the GPU, even starting the machine requires a large (2MB) blob of non-free, unsupportable software

https://wiki.debian.org/RaspberryPi

[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by ashitlerferad on Tuesday September 13, 2016 @10:36PM (#12493894)
Also from that page:

Broadcom publicly released some code, licensed as 3-Clause BSD, to aid the making of an open source GPU driver. The "rpi-open-firmware" effort to replace the VPU firmware blob started in 2016: https://github.com/christinaa/rpi-open-firmware. See more at https://news.ycombinator.com/item?id=11703842

[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by LukeShu on Tuesday September 13, 2016 @03:59PM (#12491686)
The VC4 GPU actually is the primary chip; it boots the ThreadX operating system on the VC4 first, then ThreadX loads the user-configured system onto the ARM core. Whether you run headless or not, ThreadX is running on the VC4.
[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by m3rc on Tuesday September 13, 2016 @10:47PM (#12493939)
Could you direct me to a tutorial on that? I contacted the Libreboot devs before and they told me they wouldn't give any info out about using a different device
[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by inyorgroove on Wednesday September 14, 2016 @01:59PM (#12499585)
Sorry didn't see this yesterday. Don't know if you will come back. Here is some a page that helped me with the wiring: https://web.archive.org/web/20150908054150/http://blogs.fsfe... and https://github.com/bibanon/Coreboot-ThinkPads/wiki/Hardware-...
[ Parent | on HN ]
Re:Experiments with disabling the ME on Sandybridge x230 by m3rc on Wednesday September 14, 2016 @04:02PM (#12500744)
ty ty
[ Parent | on HN ]