Hi Peter and Piotr,

thank you for your replies. Maybe I misunderstood what Bernd is trying
to achieve. If so, I'm sorry.

Generally, I very much encourage people to play around with FW/HW/SW
and to learn how (seemingly) complex stuff works. However, it sounded
to me that Bernd was actually wanting/needing a computer system which
is "more secure": They asked for "step to step instructions" in their
first mail, and said "this entire topic is extremely sensitive, for the
moment I'd prefer not to reveal my identity". "More secure" is obviously
a relative term and will mean different things for different people or
different threat models.

If you want to harden your firmware via coreboot and make it more secure
than the stock firmware, you have to learn how things work on a deeper
level, which would take *more* than a few days if you are a complete
beginner (like Bernd seems to be, at least to me). The alternative
would be to buy something with coreboot pre-installed like Chromebooks,
which has some tradeoffs I guess (for security, understanding how
things work is very valuable and almost a prerequisite I guess) - but
it's much faster, it does not take several weeks+.

After reading my last mail again I think it sounds a little unfriendly,
that was not my intend. Also let me clarify regarding the previous
paragraph: There is obviously not anything wrong with being a beginner!
We all were beginners at some point. (Actually, learning more about
firmware often makes me feel even more like a beginner :D) It is not
meant to sound insulting or offending in any way.

It was just my impression that Bernd is looking for something which I
thought just compiling+flashing coreboot could not provide, so I wanted
to prevent them from "going down the wrong rabbit hole".


On Tue, 9 Nov 2021 18:22:40 +0000, Peter Stuge wrote:
> I hope Bernd does proceed and the first success shouldn't be too long
> now. It's a great feeling to have a machine (virtual or otherwise)
> boot self-built firmware! :)

Btw I forgot about the VM. I was just thinking about HW-flashing the
X220.


Regards,

Merlin



> 
> 
> Hang in there
> 
> //Peter
> _______________________________________________
> coreboot mailing list -- coreboot@coreboot.org
> To unsubscribe send an email to coreboot-le...@coreboot.org



-- 
Merlin Büge
_______________________________________________
coreboot mailing list -- coreboot@coreboot.org
To unsubscribe send an email to coreboot-le...@coreboot.org

Reply via email to