/hrt/ - Hardware Removal-of-botnet Thread

ARM Chromebooks added edition
Last thread Findings so far
SBCs:
Beagle and some allwinners are free except for GPU accel
fsf.org/resources/hw/single-board-computers
LowRISC is an upcoming SOC running on RISC-V
lowrisc.org/

Desktops: Lots of C2Ds and atoms here, but there's also very nice opterons and an iMac
libreboot.org/docs/hardware/#desktops-amd-intel-x86
libreboot.org/docs/hardware/#serversworkstations-amd-x86
As escaping x86 may be our only long term solution, try TALOS II, which is OpenPOWER. It's quite expensive though.
raptorcs.com/TALOSII/

Servers:
See the above TALOS II and used Opteron boards.
[POSSIBILITY] PogoLinux offers rackmounts with two 48-core ARM processors!
pogolinux.com/products/servers

Laptops: For x86, you have the usual librebooted memepads
libreboot.org/docs/hardware/#laptops-intel-x86
Purism isn't libre, and may be bullshit artists according to this board, but they seem to have a roadmap that leads to Libreboot
puri.sm/learn/freedom-roadmap/
Here is a project for a Libre PowerPC laptop, shooting for RYF certification.
powerpc-notebook.org/faq/
2005 Powerbooks: OpenFirmware, powerpc architecture. Be warned: only 2GB of DDR2 ram max!
ARM Chromebooks. Dead serious. Open it up, unscrew a screw, flash coreboot internally, install loonix of choice.

Other urls found in this thread:

raptorcs.com/content/base/products.html
shop.libiquity.com/product/taurinus-x200
tehnoetic.com/
minifree.org/
store.vikings.net/libre-friendly-hardware
github.com/corna/me_cleaner
libreboot.org/faq.html#intel
blog.ptsecurity.com/2017/08/disabling-intel-me.html
yro.slashdot.org/story/17/07/19/1459244/amd-has-no-plans-to-release-psp-code
lemote.com/
raptorcs.com/TALOSII/
lemote.com/html/product/eatx/2017/0120/39.html
crowdsupply.com/eoma68/micro-desktop
lemote.com/html/about/aboutus/
wiki.gentoo.org/wiki/Project:Lemote_Yeeloong_Gentoo_Desktop
linux-mips.org/wiki/PMON
linux-mips.org/wiki/PMON_2000
github.com/corna/me_cleaner/wiki/me_cleaner-status
github.com/corna/me_cleaner/issues/3
libreboot.org/download.html
libreboot.org/docs/install/x200_external.html
ebay.com/itm/Libreboot-Installation-Service/232368648379?hash=item361a4030bb:g:xO0AAOSwYIxX-87G
tehnoetic.com/tet-lis
twitter.com/SFWRedditGifs

Please stop using "HRT" in the same context as crossdressing anime boys, those are not transgirls and it's disgusting to conflate the two.

(you)

Anyone know any good desktop/high power options? I saw some ARM stuff for server racks on that PogoLinux site that Lunduke shills a lot, but I'm leaving that as a possibility, because I don't know about its firmware situation.

Fuck off fucking commie leftist jew identity police redditor

My political leanings are actually more libertarian than anything, and I respect Free Speech for all people. I don't use reddit.

Is there any way to buy one of those obscure cpu? Where could I find one?

The links provided take you to sites for this stuff.
Here's OpenPOWER:
raptorcs.com/content/base/products.html
Here's stallman-approved trannyboot stuff
shop.libiquity.com/product/taurinus-x200
tehnoetic.com/
minifree.org/
store.vikings.net/libre-friendly-hardware
ARM Chromebooks are sold by everyone
Powerbooks are on ebay

>arm
>botnet free
pick one

This was discussed in another thread:
63236059
63236456
63236544
63236562
63236575
63236623
63236792
If you have evidence of ARM being inherently botnet though, I wanna know about it.

Forgot arrows

I made an Intel ME general (/imeg/) copypaste.

>What is the Intel Management Engine?
The Intel ME is a small co-processor located in the die of modern Intel CPUs. It's advertised as an enterprise feature, but is dangerous for home users that don't need it. You can't buy any modern Intel chips without it. The ME is dangerous because it has access to all of your memory (RAM and hard disks) and access to your OS network stacks, or it can set up its own network stack in memory if no OS is present. This means that it could potentially phone home to Intel or the CIA niggers and feed them every single one of your rare pepes and anime girls. The ME is always running even when the PC is off as long as power is supplied from the wall or a battery. Removing the ME firmware completely or destroying the ME hardware renders the PC completely unbootable, or may trigger the 30 minute boot loop where it shuts down every half hour.

>But no vulnerabilities have ever been found, r-r-right?
Wrong. There's an optional (optional for the board vendor) firmware frontend for the ME called AMT which can emulate a serial connection for remote keyboard input, which is one of the official enterprise "features" I mentioned above. There was a proof of concept attack done that would allow an attacker with access to your network to pass data from machine to machine silently and you wouldn't be able to tell if it was happening, since the ME operates at the hardware level of your PC. Just search for "Intel ME vulnerable" and be amazed.

>So what are my options right now?
You can use some really old Intel x86 hardware that's from the early Core2 era, or MIPS, or SPARC, or ARM, or AMD stuff from 2011 or before. For some Core2 machines that have the ME you can use Libreboot which contains replacement firmware that completely disables it. The final and newest option is a project by Nicola Corna called ME Cleaner, which essentially neuters the ME and renders it harmless on your system.

cont.

>What's the ME firmware like?
The Intel ME firmware is stored on the same ROM chip as your BIOS/EFI. The ME firmware itself is highly modular providing flexibility for board vendors. We can use this to our advantage by stripping out the modules that are harmful, and ME Cleaner automates that process. The ME firmware consists of a few basic modules; ROMP (only one some chipsets, starts the BUP securely), BUP (low level hardware init, controls 30 minute watchdog), KERN/KERNEL (scheduler, oversees and loads other modules), POL/POLICY (high level hardware and software [AMT] init), NFTP (networking stuff).

>What does ME Cleaner do?
It strips the ME firmware all the way down to just the ROMP (if available) and BUP so that the ME is only doing basic hardware init at boot and power management in the form of shutting off the 30 minute watchdog to prevent the bootloop problem. You use ME Cleaner by first dumping the BIOS ROM. To do this you need to hook up a SPI clip and connect to a Raspberry Pi with Linux where you can run flashrom to interface with the BIOS chip. Once you have a old-firmware.bin (you can name it anything) you run ME Cleaner on that file which will produce new-firmware.bin which you can flash back to the ROM. It's that simple. If anything goes wrong you can just restore to the original dump.

>muh AMD!
If it's anything made 2012 or later it has a PSP, which is basically the ME with more uncertainty and less documentation.

>muh Applel!
Macs have the ME too.

Resources:

>ME Cleaner project:
github.com/corna/me_cleaner
>General ME info from Libreboot project:
libreboot.org/faq.html#intel
>HAP bit because even CIA niggers don't trust the ME:
blog.ptsecurity.com/2017/08/disabling-intel-me.html

Nice info. Intel ME type-shit has pretty much fucked over all of x86. If you go Intel, you get the ME. If you go AMD, you get the PSP, which is another similar botnet. And since all attempts to get these companies to open their shit up have been futile, it's wise to consider other architectures.

It's not like software support will be particularly difficult. Many popular distros support these architectures, such as Debian or Fedora.

Kinda sad how many people i've seen make the "muh AMD" or "muh Apple" arguments. It's all the same shit.

>It's all the same shit
Yep.

>And since all attempts to get these companies to open their shit up have been futile, it's wise to consider other architectures.
the psp isn't nearly as bad though and while it's bad it's 2013 ish era vs...2009 ish? with intel, and with ryzen amd were at least entertaining the idea that they'd be more open to coreboot/libreboot, and while it could be empty promises (not necessarily since they have contributed to coreboot before) there's at least some hope that x86 isn't completely lost

>2009 ish? with intel
More like 2005 or 2006 as far as I can remember. At least 2006 since my Core2 Duo MacBook from that year has one. Luckily it's the 2,1 model and I was able to use flashrom from the OS to easily install Libreboot.

>it could be empty promises
It was
yro.slashdot.org/story/17/07/19/1459244/amd-has-no-plans-to-release-psp-code
I do have to agree though that the situation is looking slightly better for them, as they're still ok up to around 2013, and some of those boards can be corebooted/librebooted.

depending on model but yeah, was considering putting 2006 in place of 2009 but I'm sure most if not all intel chips had them at 2009

yeah I figured as much but still, getting them to officially support coreboot in some capacity is going to be a decent step if anyone figures out how to reverse engineer psp or at least neutralise it in a decent capacity

Since we're on the subject of x86, what do you think of Purism? They seem to be shooting for libreboot at some point.

>no one's mentioned Lemote
Open source MIPS hardware, I'm getting an 8-core mini ITX board for my next desktop. They also make other motherboard form factors as well as laptops and AIOs.

>Q2 '07

Core 2 Duo wins again

Not him but IMO Purism is disappointing because they promise a computing experience that utilizes the minimum amount of non-free software, yet they've shipped machines with non-free GPUs and non-free wireless cards, so what the fuck? I can install Ubuntu on any old laptop, so why the hell would I pay extra for Purism chinkshit? Their build quality is also mediocre.

lemote.com/
I can't speak moon runes, so I'm not sure what's going on here. It looks like desktop stuff, which is great! We have quite a few laptop choices right now, but not much in the way of desktops.

The moment there exists a RISC-V single board computer with fully free hardware you bet your asses I will be in line to buy 10 of them and installing Libreboot and Trisquel on them all. Or maybe Parabola or Hyperbola.
COME AT ME CIA NIGGERS

I feel mostly the same way. They have gotten better lately with corebooting their shit, but I still don't entirely trust them, as they've lied before. I would keep an eye on them though, to see if they can actually reach their goals.

I've heard some similar stuff about their quality. I think it's hilarious on their pages for the laptops where they say their keyboards are so good, "you may never stop typing!"

>Powerbooks are on Ebay
Wait, what? You mean those old PPC things Apple used to sell? Those things are libre now? How? Or are you referring to something else?

Well they use the god-tier Open Firmware and are most likely too old for hardware backdoors

They have an open firmware that is literally called OpenFirmware. I can't imagine any of their other components still need binary blobs after all this time, so yeah. I'm referring to the exact same old PPC Apple laptops. The powerbook G4s from 2005.

>Those things are libre now?
They use an open source initialization firmware and have no management engine bullshit. You might have to replace the wireless cards and you'll definitely have to install a new OS but otherwise you're good to go.

Add something about MEMEIX

Doesn't the talos II use OpenFirmware? I'm pretty certain all ibm POWER servers use it.

I thought I saw something about the original using uboot or some other newer firmware, I don't know about the Talos II

>MEMEIX
You mean Minix? Literally the only part of Minix included in the ME firmware is in the kernel module. Go beat your little peen somewhere else, Tanenbaum. Nobody cares about your shitty raccoon OS.

Minix is just a kernel, it uses NetBSD's userland.

raptorcs.com/TALOSII/
This says something about OpenBMC

>Literally the only part of Minix included in the ME firmware is in the kernel module.

So the most important part that every other module runs on? That's like trying to say linux isn't the most important part of a Linux distro

>That's like trying to say linux isn't the most important part of a Linux distro
b-but it's not. GAHNOO is.

Duuuuude...
What if you ran Minix on a system that had the ME?
That would be Minix ON the Minix!

wew

>bald fuck too lazy to make a userland to go with his shit kernel
Color me surprised.

>So the most important part that every other module runs on?
No, it's not important at all. It gets stripped out by ME Cleaner.

More like Minix alongside Minix

No sense in creating a userland for an educational kernel intended to learn about kernels. You seem like you have something personal against Tanenbaum, did he make you watch as he fucked your mom or something?

>You seem like you have something personal against Tanenbaum
I don't like bald, smug faced CIA niggers that are always high on their own farts because they wrote a kernel. Little nigger babies, I swear to G-d. I wrote a fucking compiler. Don't make me run you over in 1999, bitch. You'll glow in the dark.

Calm down Terry, or the prison guards will give you more antipsychotic meds.

I'd just like to interject for a moment. What you’re referring to as Minix, is in fact, ME/Minix, or as I’ve recently taken to calling it, Me plus Minix. Minix is not an operating system unto itself, but rather another nonfree component of a fully functioning ME system made useful by the ROMP, BUP, POL, and vital Modules comprising a full hypervisor as defined by Intel.
Many computer users run a modified version of the ME system every day, without realizing it. Through a peculiar turn of events, the version of ME which is widely used today is often called “Minix”, and many of its users are not aware that it is basically the ME system, developed Intel. There really is a Minix, and these people are using it, but it is just a part of the system they use.
Minix is the kernel: the program in the system that allocates the machine’s resources to the other programs that you run. The kernel is an essential part of an operating system, but useless by itself; it can only function in the context of a complete operating system. Minix is normally used in combination with the ME operating system: the whole system is basically ME with Minix added, or Me/Minix. All the so-called “Minix” distributions are really distributions of ME/Minix.

Ok so i'm trying to Jewgle translate some of the Lemote stuff
lemote.com/html/product/eatx/2017/0120/39.html
Function module indicator
Motherboard size 304.8 mm x 330.2mm
CPU 2 x Godson 3B 3000 processor, clocked at 1.5GHz
Chipset AMD SR5690 + SP5100
Graphics chip SM750, 64MB memory
NIC chip 1 x INTEL I350 Gigabit Ethernet
Memory DDR3 RDIMM, maximum support 8GB x8
2.5 inch / 3.5 inch hard drive SATA hard drive, support for 6G SAS RAID card
Display Interface 1 x VGA connector
SO-DIMM slot 1 x SO-DIMM slot for the BMC module
PCIE slot 1 x (PCIEx16) slot; 2 x (PCIEx8) slot; 1 x (PCIEx4) slot
SATA interface 6 x SATA2.0 interface
MiniPCIE interface 1 x MiniPCIE interface
USB interface 4 x USB2.0 interface
Indicator Network indicator: Link 100 / 1000M Green Steady; Link 10M Steady orange; ACT flashes
Button 1 x POWER; 1 x RESET
BIOS PMON, Kunlun firmware
Operating system LOONGNIX, won the unicorn, Puhua
Operating temperature 0 ℃ ~ 40 ℃
>Operating system LOOGNIX won the unicorn
Sounds great

Tanenbaum wrote a compiler too

Amsterdam compiler kit

I forgot to mention that their Loongson 3 processors have some die space dedicated to hardware-assisted x86 emulation for qemu

Anyone here use an ARM based laptop? I know things like the Raspberry pi Pi-Top have non-free blobs, but my bet is that it would be better than nothing.
Some things I am considering
- ARM Chromebook
- Pinebook
- Pi-Top
- PocketCHIP

Anything else I should put on my radar?

>die space dedicated to hardware-assisted x86
So does this mean botnet? I really want Loongnix to win the unicorn.

no

>crossdressing anime boys, those are not transgirls
user... trans""""girls"""" are actually just crossdressing boys. That is why they are transgirls and not actually girls. It's just pretend.

There's this. Probably about as powerful as the pinebook.
crowdsupply.com/eoma68/micro-desktop
Also, those ARM chromebooks look nice. I especially like the screw system for write protection.

I have seen that, issue is that uses Allwiner CPUs that have a terrible trackrecord with the FOSS community. That and the video firmware is 100% binary blob and everything is too expensive.

I've already pretty much finished the OP image for next thread. Its some good shit

Good. I may add Lemote to the list. Any info on their boot firmware?

I don't want feminine penises associated with the mutilated garbage that trannies have put between their legs.

I don't know what it is but I know it's open source, RMS used to use one due to this.

He used to use that old netbook from them. I'm asking about these server boards. I guess they would also use similar shit since it's the same company?

some trannies just cross-dress and have penises like normal men. There is no difference between the crossdressing men you like and the ones who destroy their dick. mental illness both

I know, I can't imagine they'd be developing a different firmware for each computer they sell and selectively making them open or closed source.

So how does this stuff get communicated?
Would fixing a server/router prevent connected computers from letting the hardware modules phone home?

None of these devices can be used completely with open source software without severe limitations

>- ARM Chromebook
Most use a Mali GPU and VPU which require close sourced drivers
>Pinebook and PocketCHIP
Mali-400 (Which is an old af if I wanted botnet I'd want something perfermant like an a75/g72 soc).

Still jewgle translating their site. There's some unintentionally funny parts so far.
lemote.com/html/about/aboutus/
>strive to defend the national information security, to contribute to the great rejuvenation of the Chinese nation!
Very patriotic
>In November 2013, Zhang Fuxin, general manager, was invited by the delegation to go to Beijing, Hangzhou and Jiangxi to preach.
And apparently religious

I am aware of the issues with Mali, I would assume that the more open platform is better than nothing though.

Do you have any suggestions for readily available mobile FOSS rigs that isn't a trannyboot thinkpad?

There was some user in an earlier thread who had an ARM Chromebook from Samsung running GNU/Linux. He said it's not really noticeable at all if you use XFCE (which this board seems to love anyway)

You can install SeaBIOS on some Chromebooks

Here's the links to what i'm referencing:

bump

xfce is great on c201
vlc is useless without gpu driver
mplayer works fine so use that instead
use tplink tl-wn722n with open firmware for wifi

bump

>xfce is great on c201
Good to know. I typically go with a TWM such as bspwm or i3, so that should work out even better.
>use mplayer not vlc
I use mpv, so that should be fine I guess.
>use usb wifi
Yeah if i'm going for 100% stallman mode, i'll remember that.

Thanks for the bumps

I've been thinking about those Lemote boards.
Sup Forumsentoo wiki has a page on that old yeeloong netbook, saying it had something copyleft called PMON.
wiki.gentoo.org/wiki/Project:Lemote_Yeeloong_Gentoo_Desktop
PMON is this thing
linux-mips.org/wiki/PMON
Which apparently got abandoned. There is a successor called PMON2000, which is also Free Software, licensed under 4-clause BSD. There's a lot of broken links, but lemote apparently had a website dedicated to this, so I guess they probably use some vaiation of PMON or PMON2k for their shit now.
linux-mips.org/wiki/PMON_2000

The Novena. Not the fastest and very expensive, on the other hand it works great out of the box, no non-free blobs, very stable, has SATA, displayport, battery charge controllers, speakers, PCI-E wifi, all the things you would expect a laptop to have.

Admittedly it's EXTREMELY niche, but so is this thread.

>xilinx spartan
why does it have an fpga?

Probably for field programming gate arrays

There is a MyriadRF SDR that can interface to it, or you can use it for whatever reverse engineering project you want. It requires nonfree Xilinx software to use, though. Fortunately it ships unconfigured (blank) and isn't required for anything, so I just ignore it.

So I always see stuff about ME but what about PSP? Are there any advances in disabling that?

Nothing that I would know of. If I had to guess, this would be because Intel is way more popular in terms of processors. Almost all laptops on the market use Intel, and AMD only seems to show up occasionally. I'd say more desktops are Intel that AMD as well, so in general, the ME is going to be the biggest threat.
But that's just my theory.

Why not just buy pre-i* based computers? A C2D that can be LibreBooted is totally usable for 99% of common home tasks.

Yeah, you wont be watching 4K anime, but that's the price you'll pay, right?

Those look great, but a lot of people who care about this botnet stuff know about them.
I guess part of this thread is trying to find and discuss other options, for whatever reasons.

Is E2-1800 safe from AMD PSP? The CPU was announced few days before AMD TrustZone was a thing.

Was waiting for the thread to die so I could use my new OP image.

Also, I see it's from 2012, so I think it's fine. I think it's around 2013 when the PSP was introduced.

Oh, neat.
I own one of these and I really think you are wrong. A bunch of the hardware needs proprietary drivers, and the CPU is still closed source.

>CPU is still closed source
Are you referring to something like it being an open ISA? Because aside from something like RISC-V, there's really not many of those.

How do i know if my computer is compatible with me_cleaner?

Read the github.

From what I can tell, you can't really 100% know. This claims it's compatible all the way through Skylake
github.com/corna/me_cleaner/wiki/me_cleaner-status
This github issue is random people who got it to work. Your mileage may vary
github.com/corna/me_cleaner/issues/3

That kinda blow i've got a x200 t420 and i5 4570 that i wanted to clean with this but since there is not guarantee i don't want to risk it thanks !

>x200
That is compatible with Libreboot! It gets rid of the ME entirely, and is stallman approved!
libreboot.org/download.html
libreboot.org/docs/install/x200_external.html

Do this instead.

Yeah i think my technical capability stop there messing inside the hardware is beyond me i guess i'll need to pay someone to do it i don't even have the tools.

Ebay
ebay.com/itm/Libreboot-Installation-Service/232368648379?hash=item361a4030bb:g:xO0AAOSwYIxX-87G

There's also this one, which can be paid for in bitcoins.
tehnoetic.com/tet-lis

Any thoughts on olimex teres? Open source hardware but lame specs and allwinner A64 soc. Comes as a kit and you have to build it, but looks pretty simple. Only annoyance is that it is 240 euros.

That's probably what i'm looking for.

Would you still recommend me me_cleaner?

please hardware gods give me risc-v SBC
i'll offer my soul as compensation

You won't need ME cleaner if you libreboot it. Libreboot legit removes the ME entirely.

If you're talking about your other hardware, It's up to you, user.

>allwinner A64 soc
Where does any of the open source parts come in? Sound like it's about as open as phones are.

Interesting. This seems similar to the Pinebook or the EOMA68. Do you think it's worth putting in the list?