6 ms·

I have a Thinkpad X200 with libreboot, and with it, I install the intel-microcode and such so I have the updated protections on then. I personally feel that is

by kop316 5y ago

I have a Thinkpad X200 with libreboot, and with it, I install the intel-microcode and such so I have the updated protections on then. I personally feel that is a practical solution, as I have the FOSS bootloader, and I don't think Intel has backdoors in their microcode, it would much more likely be in Intel ME.

fsflover 5y ago
Are you saying that you can update the microcode on Thinkpad X200? How did you do that? I thought Intel stopped supporting it.
- jabl 5y ago
  Given the mention of 'intel-microcode', presumably the parent means the Intel CPU microcode that is loaded during Linux kernel boot.
  - fsflover 5y ago
    But does it actually help against those vulnerabilities?
    - kop316 5y ago
      AFAIK it does yes.
    - mistrial9 5y ago
      Vcs-Browser: https://salsa.debian.org/hmh/intel-microcode https://salsa.debian.org/hmh/intel-microcode
  - kop316 5y ago
    Yeah sorry, I should have been more specific, `interl-microcode` is a debian package that loads it on linux boot.
- kop316 5y ago
  AFAIK it is supported: https://wiki.debian.org/Microcode https://wiki.debian.org/Microcode
SubzeroCarnage 5y ago
The Core 2 line of processors has not received any microcode updates since 2015. "Products not planned": https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance.pdf https://www.intel.com/content/dam/www/public/us/en/documents...
- kop316 5y ago
  Well that's disappointing....but I guess not unexpected.