4 ms·
I want to be able to buy systems with an Opensource boot loader like Coreboot and no Intel management features at all. Plus with secure system calls in the cpu.
by acd 9y ago
I want to be able to buy systems with an Opensource boot loader like Coreboot and no Intel management features at all. Plus with secure system calls in the cpu.
Please disable Intel boot guard for coreboot and work with the open source community.
That way we will have more secure systems.
- madez 9y agoCoreboot uses proprietary blobs, so using it doesn't ensure running open source nor free code.
- nerdponx 9y agoAFAIK these attacks had nothing to do with IME or proprietary UEFI.
- orclev 9y agoBoth you and madez are correct, although I still agree with the principle behind the original statement. IME (and the AMD and ARM equivalents) are a gaping security hole in all modern processors and that should terrify everyone who cares about security at all. Think about things like Meltdown and Spectre and that's in parts of the processor we can actually audit, now consider all the exploitable flaws that are lurking in things like IME that we (although presumably nation states can) can't audit.