2 ms·
i.MX8 series, as used in MNT Reform and the Librem 5. Rockhip chips as used in the PinePhone. Mediatek chips from some Chromebooks. Those let the OEM choose whe
by rhn_mk1 3y ago
i.MX8 series, as used in MNT Reform and the Librem 5. Rockhip chips as used in the PinePhone. Mediatek chips from some Chromebooks. Those let the OEM choose whether they want to lock TrustZone or not.
Let me explain what unique threat the blob poses:
https://securityaffairs.co/58656/hacking/intel-management-engine.html https://securityaffairs.co/58656/hacking/intel-management-en...
- AshamedCaptain 3y agoFor the record, these chips do not have AMT in the first place, and even then they come with coreboot, for which ME is not really a concern. I thought you were talking about proprietary microcode, which all of these chips you mention do come with. Or even worse, since they are all SoCs.... You'd have to e.g. avoid using the Ethernet controller on them (which generally has flashable eeproms with code) which would also happen to be an effective prevention of any ME issues even if were running an ancient version of ME. I.e. the only threat vector you mentioned does not apply and can't possibly apply. A mac shares more firmware with your average intel laptop than this.
- rhn_mk1 3y agoWhich is exactly the point. No AMT, one less problem.
- AshamedCaptain 3y agoThese chips as in non-laptop non-vpro intel chips like the one used here.