Re:Disabling the Intel Management Engine
by ynniv on Wednesday October 11, 2017 @09:49AM
(#15449709)
First, Lenovo doesn't receive any money when you buy a used laptop. Second, using a ten year old laptop sends a much stronger message than buying a new, slightly alternative laptop. Third, security is like history - if you want to get it right, you have to wait for rigors of time to reveal the truth. We think that Purism is at least as secure as Libreboot, but we know a lot more about ten year old hardware than something fresh off the fab in China.
Re:Disabling the Intel Management Engine
by lurker12390879 on Wednesday October 11, 2017 @10:46AM
(#15450183)
Coreboot does run on their laptops, but it has too many blobs to make the Libre crowd happy.
Purism has mentioned they may take interest in porting the rest of the way to libreboot someday.
The real issue too is that a lot of naysayers dislike Purism because they provide modern competition to people selling Librebooted laptops.
Also, Purism is taking steps to get coreboot to run on their laptops[1][2], so the graph on this website isn't even right anymore.
And I just found out that, interestingly, the T400 and X200 both come with IME. The only difference is that the AMT can be fully disabled on older intel chipsets[0].
[0]: https://libreboot.org/docs/hardware/gm45_remove_me.html
[1]: https://puri.sm/posts/coreboot-on-the-librem-13-v2-part-1/
[2]: https://puri.sm/posts/coreboot-on-the-skylake-librems-part-2...