/hrt/ - Hardware Removal-of-botnet Thread

FUCK THAT MANAGER FAGGOT edition
Last thread (1/4)

This general is dedicated to the creation of a list of hardware that is relatively botnet-free.
The Intel ME and other components are a serious threat to user privacy.

>"But what's the Intel ME, user?"
I'm glad you asked! The Intel ME, or Management Engine, is a secondary co-processor in every single Intel chip in the last decade.
It runs a MINIX-based operating system and has full networking capabilities, drivers, and a goddamn web server in it.
networkworld.com/article/3236064/servers/minix-the-most-popular-os-in-the-world-thanks-to-intel.html
This page offers additional information, and explains that it can read your files and applications, act as a keylogger, capture the screen, inject rootkits, etc.
libreboot.org/faq.html#intelme
Very nasty stuff, and no, the HAP bit thing isn't a full fix
firmwaresecurity.com/2017/12/06/bheu-slides-on-intel-me-vuln-uploaded/

>"HAHA INTEL BTFO! SCREW YOU GOYS I GOT RYZEN!!"
AMD has its own botnet, called the PSP, or Platform Securiy Processor.
Here's what it is:
libreboot.org/faq.html#amd-platform-security-processor-psp
Here's Libreboot asking for it to be opened up in Ryzen:
libreboot.org/amd-libre.html
Here's Plebbit asking for it:
reddit.com/r/linux/comments/5xvn4i/update_corebootlibreboot_on_amd_has_ceo_level/
Here's Edward motherfucking Snowden asking for it:
mobile.twitter.com/Snowden/status/837367956229206016
And here's AMD telling everyone to go fuck themselves:
yro.slashdot.org/story/17/07/19/1459244/amd-has-no-plans-to-release-psp-code

>"b-but how can I avoid this? Im scared, user!"
That's the point of this thread. To highlight options that are out there that are relatively free of botnets.
This will include the typical Librebooted memepads and whatnot, but a big part of this is also exploring alternative architectures.

Other urls found in this thread:

libreboot.org/docs/hardware/#desktops-amd-intel-x86
libreboot.org/docs/hardware/#serversworkstations-amd-x86
libreboot.org/docs/hardware/#laptops-intel-x86
puri.sm/learn/freedom-roadmap/
crowdsupply.com/eoma68/micro-desktop
imx6rex.com/open-rex/
coreboot.org/Chromebooks
docs.google.com/presentation/d/1eGPMu03vCxIO0a3oNX8Hmij_Qwwz6R6ViFC_1HlHOYQ/edit#slide=id.p
cavium.com/Table.html
shop.kobol.io/
en.wikipedia.org/wiki/Free_and_open-source_graphics_device_driver#ARM
lwn.net/Articles/738225/
github.com/altreact/archbk/issues/3
raptorcs.com/TALOSII/
nxp.com/products/microcontrollers-and-processors/power-architecture-processors
powerpc-notebook.org/faq/
embeddedplanet.com/product/single-board-computers/
code.coreboot.org/p/openfirmware/source/tree/HEAD/
lemote.com/html/product/
embeddedplanet.com/single-board-computers/processor/cavium-oceteon-ii/
crowdsupply.com/gnubee/personal-cloud-1
crowdsupply.com/gnubee/personal-cloud-2
code.coreboot.org/p/openboot/source/tree/1/
en.wikipedia.org/wiki/SPARC#Implementations
sifive.com/products/freedom/
lowrisc.org/
librecmc.org/
gogs.librecmc.org/libreCMC/libreCMC/wiki/Supported Hardware
libreboot.org/docs/install/
libreboot.org/docs/install/t400_external.html
phoronix.com/scan.php?page=news_item&px=AMD-PSP-Disable-Option
libreboot.org/docs/hardware/#list-of-supported-hardware
newegg.com/Product/Product.aspx?Item=N82E16819113435&cm_re=vishera-_-19-113-435-_-Product
twitter.com/NSFWRedditVideo

(2/4)
For inclusion into this list, if the processor is made by Intel Corporation or Advanced Micro Devices, the device must be 100% free as in Libreboot.
Otherwise, a less-extreme stance is taken, and something like Coreboot or U-boot will suffice.

Findings so far
x86 (Supported Distros: Basically all):
For desktops, there's lots of C2Ds and atoms listed, but also some very nice opterons and apparently an iMac
libreboot.org/docs/hardware/#desktops-amd-intel-x86
libreboot.org/docs/hardware/#serversworkstations-amd-x86
For Laptops, you have the CD and C2D memepads
libreboot.org/docs/hardware/#laptops-intel-x86
Purism doesn't do libreboot, but their roadmap includes this as a future goal.
puri.sm/learn/freedom-roadmap/
The last AMD chip that came without the PSP is Piledriver.
VIA also makes x86 processors. Proprietary BIOS, but maybe Coreboot potential?

ARM (Supported Distros: Most)
Obviously there's a shit ton of SBCs
One of these is EOMA68, which features 3D-printable housings, and potential RYF cert.
crowdsupply.com/eoma68/micro-desktop
iMX6 Rex is an education-based SBC that combines elements of a Pi and an Arduino. It uses U-Boot.
imx6rex.com/open-rex/
For a laptop option with an open firmware, try ARM Chromebooks.
I'm dead serious. Open it up, remove the write protection, reflash coreboot with different payload (Not seaBIOS or Depthcharge), install loonix of choice.
coreboot.org/Chromebooks
docs.google.com/presentation/d/1eGPMu03vCxIO0a3oNX8Hmij_Qwwz6R6ViFC_1HlHOYQ/edit#slide=id.p
Cavium makes some god-tier processors. Be on the lookout for that.
cavium.com/Table.html
Helios4 is an open-hardware NAS with U-boot
shop.kobol.io/

(3/4)
In general, your biggest concern with ARM is the GPU drivers.
Mali is fucked. PowerVR too. Vivante GC and Qualcomm Ardreno are fine. Broadcom VideoCore is partial.
en.wikipedia.org/wiki/Free_and_open-source_graphics_device_driver#ARM
MALI MIGHT BE GETTING OPENED UP PRAISE LINUX TORVALDS TECH TIPS
lwn.net/Articles/738225/
Some anons have reported that lighter environments like XFCE are usable on stuff like Mali without the driver, but it's not ideal.
One user said he couldn't remove the ChromeOS on his libreboot C201. This github issue talks about a solution.
github.com/altreact/archbk/issues/3

OpenPOWER (Supported Distros: Fedora, Debian, CentOS/RHEL, OpenSUSE, Ubuntu, BSDs):
Raptor Engineering sells POWER9 workstations, that may soon be getting RYF certification.
They're expensive as fuck, but probably the most powerful non-botnet computers that exist. Comparable to Xeons/Epyc.
raptorcs.com/TALOSII/

PowerPC (Supported Distros: Gentoo, Free/Open/NetBSD)
The company that still makes this is NXP
nxp.com/products/microcontrollers-and-processors/power-architecture-processors
Here is a project for a Libre PowerPC laptop using NXP, shooting for RYF certification.
powerpc-notebook.org/faq/
EmbeddedPlanet has several PowerPC SBCs, most using NXP.
embeddedplanet.com/product/single-board-computers/
If you have old PowerPC Apple products, they use OpenFirmware, which is here
code.coreboot.org/p/openfirmware/source/tree/HEAD/
Recommended models if you want to buy one: late PowerBook G4, PowerMac G5

(4/4)
MIPS (Supported Distros: Debian, Gentoo, NetBSD):
The /csg/ of desktops. Lemote is a chink company that sells libre MIPS boards, using PMON firmware.
lemote.com/html/product/
A German user on this board says he is going to work with Lemote to resell their stuff.
EmbeddedPlanet also has MIPS boards with processors from Cavium with U-boot firmware.
embeddedplanet.com/single-board-computers/processor/cavium-oceteon-ii/
GnuBee has two low power NAS devices. They're cheap, they use MIPS, and they're going for RYF!
crowdsupply.com/gnubee/personal-cloud-1
crowdsupply.com/gnubee/personal-cloud-2

SPARC (Supported Distros: *BSD, Gentoo, Illumos):
Legit server stuff here. Open ISA and Open Boot firmware.
code.coreboot.org/p/openboot/source/tree/1/
Below link is a big list of options, from ancient 80s shit, to modern servers released this year with 5.0GHz and 32 cores
And of course, everything in between
en.wikipedia.org/wiki/SPARC#Implementations

RISC-V (Supported Distros: FreeBSD):
Only SBCs here. SiFive has some.
sifive.com/products/freedom/
There's also LowRISC
lowrisc.org/

For Routers, check out LibreCMC and its supported list.
librecmc.org/
gogs.librecmc.org/libreCMC/libreCMC/wiki/Supported Hardware

bump + uwu

>user
>...
>user, wake up.
>wha....waht?
>user, it is time.
>...what time?
>You need to do IT.
>I need?
>Yes. You need. You need to do it now.
>I-I need to do it.
>Yes user. Go.

I think it's kinda ironic that Chromebooks, which are known for being a jewgle botnet, actually make the flashing process much easier with the write-protection screw or switch or whatever.

Well. There's always a question whether bad shit we encounter is consequence of someones stupidity or malevolence. Goolag doesn't seems to care about the rebelious type of consumers. Two things: G thinks its all-powerful (which it isn't) and they only tactics is to silence the rebels with identity politics bs. Sadly it affects all levels of tech production - from vision to delivery.
On the other hand, due to average consumer knowledge - which doesn't contain such concept as OS reinstall - they might done it for their own future service convinience. I don't know, just thinking at loud here.

stop

I think, and this is just my theory here, that Google makes an active attempt at providing what i'd like to call 'half-assed freedom'. They make use of FLOSS, but also corrupt it with their proprietary botnet. Now we can certainly theorize as to why they do this. Perhaps it's just to make their job easier in some way. I personally think it's done as a deception technique meant to trick people who are a bit too trusting into supporting them. They can say "Android is Open Source" or "Android is LINUX!", even though that does not tell the whole story. It makes use of the linux kernel and has many open components, but the entire platform is a foundation upon which proprietary software is built.

And yet most will not think that far, and will regurgitate the whole "android is linux" or "chromeOS is linux" thing. I have seen so many people say this.

That said, I think the half-assed freedom that they provide also allows for changes to be made. Taking chromebooks as an example, they have a locked-down, essentially proprietary OS, and a payload that prevents the installation of other OSes. However, since they use coreboot, we can free these chromebooks through a reflash, and undo Google's lockdown on them.

I forget what point I was trying to make here, but I guess the idea is that half-assed freedom, while bad, can be better and provide us with more opportunities than zero-assed freedom, or something

no

what are you afraid of?

bump

>tfw the thread is slow

>es. You need. You need to do it now.
>>I-I need to do it.
what the fuck is that thing? its got 4 contacts. at first it looked like those electric nipple clamps but with 4 wires. what the fuck could this possibly be used for?

You hook it up to your thinkpad *00 series to Libreboot it. Pictured here

When TALOS II arrives the thread will become faster.

Happening in January at the earliest. Would have been this month but IBM delayed POWER9's release for whatever reason.

I hope it wasn't because they were informed that POWER9 was lacking some extra functionality.

>take security measures
>have tails handy for secure browsing
>now even my hardware is fucking spying on me
>video editor so no choice but to bow down to the intel overlords and hope for the best
feels bad

Here's an 8 chon user who posted the update message from Raptor

Apparently they have "retargeted the final version of the POWER9 processor"

This turns me on, ME has been a bad girl.
Pics of what it clamps onto please

>This turns me on
Go here:
libreboot.org/docs/install/

Click on those blue links in the list, and enjoy all the lovely motherboard porn in the install instructions

also, the pic I posted earlier is from the T400 guide
libreboot.org/docs/install/t400_external.html

oh thats cool, its sorta like an upside down inverse zif socket.

does this work on dekstops? from what I understand it just replaces the bios. My mother board has a chip in a dip8 package on an ic socket which I believe is the bios chip. Can I buy a replacment ic, flash libreboot to it, and just swap the ic whenever I want to switch between normal bios and libreboot?

forgot the pic, pic related zif socket

phoronix.com/scan.php?page=news_item&px=AMD-PSP-Disable-Option

>My mother board
It won't work. Libreboot only supports certain boards, which are the ones outlined in the link in this post
And at this link:
libreboot.org/docs/hardware/#list-of-supported-hardware

Just gonna link to my response from the last thread

fug.
guess Im stuck with my 20 second boot times

but it's actually disabled whether you believe it or not

If you want to buy a new board (since you seem mostly interested in desktops), the newest and most powerful you can get that's compatible is the ASUS KGPE-D16.

>yfw instead of disabling the botnet the button puts you on a priority watchlist

dubs checked

Id actually do something like that if I didn't already I didnt just buy a motherboard a year ago.
do those g34 amds have hyperthreading? Im not familiar with amd and the specs on the ones I was looking at werent very descriptive

about to fall asleep, thanks for all the info if I dont reply agian

afaik, "Hyperthreading" is an Intel thing.

That ASUS board according to the site says it's fast and works well with virtualization and stuff like that. Obviously it's not gonna be as fast as something super modern, but it should be pretty solid

>afaik, "Hyperthreading" is an Intel thing.
Fine, do they have thread_count = core_count*2;
this hyperthreading thing is like like those people who get shitty with me for saying "coke" when trying to avoid the pop vs soda argument.
if youre not just being anal about wording then yea the new amd stuff has higher thread counts
newegg.com/Product/Product.aspx?Item=N82E16819113435&cm_re=vishera-_-19-113-435-_-Product
theres an amd 6 core 12 thread

thread count has nothing to do with motherboards, its like how you can plug a non ht i5 into the same motherboard that had a yes ht i7 in it.
yea it seems nice, oh just realized I was back in the libreboot thread and what you meant by newest. Yea thats a whole different subject compared to modern stuff

My c720 is unironically fully free even on the firmware. It's one of lives many ironies.

From what I have found, the 1005ha eeepc comes without ME or AMT. Is there anything else I need to do to lock it down?