LOL
Intel® Management Engine (ME)
Aiden Cooper
Other urls found in this thread:
libreboot.org
libreboot.org
libreboot.org
puri.sm
coreboot.org
docs.google.com
inforcecomputing.com
cavium.com
en.wikipedia.org
github.com
ghacks.net
raptorcs.com
nxp.com
powerpc-notebook.org
embeddedplanet.com
lemote.com
embeddedplanet.com
sifive.com
lowrisc.org
lwn.net
hooktube.com
libreboot.org
twitter.com
Adam Morales
Resposting for those looking for relatively botnet-free options
(1/2)
Findings so far
x86:
For desktops, there's lots of C2Ds and atoms listed, but also some very nice opterons and apparently an iMac
libreboot.org
libreboot.org
For Laptops, you have the CD and C2D memepads
libreboot.org
Purism doesn't do libreboot, but their roadmap includes this as a future goal.
puri.sm
The last AMD chip that came without the PSP is Piledriver.
VIA and Zhaoxin Semiconductor apparently also make x86 processors.
ARM:
Obviously there's a shit ton of SBCs (Olimex, Beagle, etc).
For a laptop option with an open firmware, try ARM Chromebooks.
I'm dead serious. Open it up, remove the write protection, reflash coreboot with different payload (Not seaBIOS or Depthcharge), install loonix of choice.
coreboot.org
docs.google.com
Inforce has an SBC with high-specs and an open GPU
inforcecomputing.com
Cavium makes some god-tier processors. Be on the lookout for that.
cavium.com
In general, your biggest concern with ARM is the GPU drivers.
Mali is fucked. PowerVR too. Vivante GC and Qualcomm Ardreno are fine. Broadcom VideoCore is partial.
en.wikipedia.org
Some anons have reported that lighter environments like XFCE are usable on stuff like Mali without the driver, but it's not ideal.
One user said he couldn't remove the ChromeOS on his libreboot C201. This github issue talks about a solution.
github.com
Jeremiah Jones
Here
ghacks.net
My system can't seem to return any results, though I think I'm fine. Seems like older "K" CPUs are fine.
Michael Gonzalez
(2/2)
OpenPOWER:
Raptor Engineering sells POWER9 workstations, that may soon be getting RYF certification.
They're expensive as fuck, but probably the most powerful non-botnet computers that exist. Comparable to Xeons/Epyc.
raptorcs.com
PowerPC:
The company that still makes this is NXP
nxp.com
Here is a project for a Libre PowerPC laptop using NXP, shooting for RYF certification.
powerpc-notebook.org
EmbeddedPlanet has several PowerPC SBCs, most using NXP.
embeddedplanet.com
MIPS:
The /csg/ of desktops. Lemote is a chink company that sells libre MIPS boards, using PMON firmware.
lemote.com
A German user on this board says he is going to work with Lemote to resell their stuff.
EmbeddedPlanet also has MIPS boards with processors from Cavium with U-boot firmware.
embeddedplanet.com
RISC-V:
Only SBCs here. SiFive has some.
sifive.com
There's also LowRISC
lowrisc.org
Zachary Moore
why is it that only Intel has these issues? i've never seen any headlines about AMD software being broken like this.
Parker Butler
Nobody cares about AMEMED. They have issues too, can't remember how is it called though. Plus shite performance compared to Intel.
Charles Watson
AMD also has a similar thing called the Platform Security Processor. As for why they don't have as many vulnerabilities, perhaps it's for the same reason that Linux doesn't get as many viruses. Less marketshare.
Michael Davis
tfw haslel
Mason Hall
tl;dr your tinfoil is too tight
Jack Foster
Chinks are still allowed to make freedom devices?
Tyler Powell
My AMD Ryzen with 8 cores does not have this problem.
Easton Cooper
They made the first ever freedom device with that old Yeeloong netbook. When I used to post the Hardware Removal-of-botnet Threads (/hrt/), someone said in there that they read through the moonrunes and figured out that they still use Libre firmware.
Zachary Anderson
this makes me feel better for having a laptop with and amd apu from 2011
Liam Phillips
>amd
>2011
Yeah you're safe. AMD added the botnet around 2013 or so.
Adam Johnson
The scary thing is that AMD is probably less thoroughly investigated
Luke Perez
Would it be possible to have a pre-ME Thinkpad acting as a router that handles/loads all http traffic on the network? So you could ssh into the Thinkpad and view the internet securely, without even having to worry if the box you're sshing from has ME. Is this possible? Would it create a secure home network?
Evan Brown
as handsome a she is amd has its own version of ME called PSP
Sebastian Ramirez
for some reason, vulnerability detection tool is stuck at 100% on my ryzen 7 system :^)
Austin Myers
Replacing ME with (cut down) Linux and a golang init. Apparently they reduced their boot time lots too lwn.net
Ian Garcia
>tfw my Xeon doesn't give a shit
Ryder King
+15rupees
Benjamin Cooper
we have to wait and see, this might be nothing or it might be pretty fucking bad. either way it's not gonna be used against nobodies
Ayden White
trusting intel (((tools))) in the first place
Justin Lopez
...
Cameron King
Shit, now what?
Angel Barnes
AMD's version is a bit different, for starters it uses the host OS to run its network stack, whereas the IME can do it without the OS
Secondly, the PSP just doesn't get as much attention since AMD doesn't have as much marketshare and the IME is easier to break into and poke around.
Ethan Jenkins
you patch it and hope
Joseph Peterson
yeah and it's not completely broken and vulnerable like ME
Michael Hill
The HAP bit disables ME after initialization
The only thing you have to worry about is HDD bootsector hijacking and malicious PCI option ROMs
Michael Diaz
i think amd is better
>pre 2010 intel - memory sinkhole bug
>post 2010 intel - me
either way with joos u loose
Jacob Morgan
Anthony Parker
you mean shekels
Chase Gutierrez
IT'S HAPPENING
Jaxson Thompson
Can someone tell me how do you fix it?
Ryan Fisher
>yeah and it's not completely broken and vulnerable like ME
It's still something that you don't want in your hardware. Please kindly fuck off, and shill your favorite brand elsewhere user. No one in their right mind would ever claim that AMD's version of ME is the proper option.
Jose Hall
Yeah and being an enterprise admin that wants to confirm their environment isn't fucked sure is tin foil hattery, it's called being proactive and or good at your job retard.
Daniel Gomez
>Millions of computers could be remotely hijacked through bug in firmware code.
>"bug"
Justin Hill
Can you link to source sauce for this :
> for starters it uses the host OS to run its network stack, whereas the IME can do it without the OS
And additional main course details about AMD PSP?
Cameron Bennett
Libreboot has a writeup on PSP
libreboot.org
Samuel Hill
>libreboot.org
> Coming through w/ the source sauce request