On 20.01.2018 20:16, taii...@gmx.com wrote:
On 01/20/2018 02:08 PM, Davidson wrote:
I just forgot. I noticed that some places (librem I think, and
System76
<https://duckduckgo.com/l/?kh=-1&uddg=https%3A%2F%2Fliliputing.com%2F2017%2F11%2Fsystem76-will-disable-intel-management-engine-linux-laptops.html>)
are selling computers with ME (partially) disabled on their intel
procs, does anyone know about either buying just procs or mobo/proc
combos with (partially) disabled intel ME procs?
Purism is a scam, ME can't be disabled.
Please note their "coreboot" is simply a shim loader layer, the
hardware init is done by the intel FSP binary blob moving the trust
layer from the vendor+intel to just intel which I argue is not a real
improvement to justify the high price of their devices.
https://www.reddit.com/r/linux/comments/3anjgm/on_the_librem_laptop_purism_doesnt_believe_in/
https://goblinrefuge.com/mediagoblin/u/onpon4/m/what-purism-s-road-to-fsf-ryf-endorsement-chart-should-look-like/
Google tried to get intel to free ME, if they can't do it then no one
can.
System76, Purism etc are all using me_cleaner a tool which they didn't
develop so you can buy pretty much any laptop and get the same results
if ME is your only concern although considering the massive security
problems with intel CPU's now I wouldn't buy one.
My laptop recommendation as always is a lenovo G505S, no ME/PSP and
coreboot with open source cpu/ram init (blobs for video/power, but are
removable due to no hardware code signing enforcement unlike intel or
new amd stuff). It works with Qubes 4.0.
For a desktop/workstation I recommend the libre firmware available
KCMA-D8/KGPE-D16 (coreboot with entirely open source hardware init)
they also feature OpenBMC for libre remote management.
As I understood it, its not *totally* disabled but is *partially*
disabled (like the TCP/IP stack).
Anyway. Your KGPE-D16 suggestion is interesting (thx!), and that mobo+ a
12core 2014 opteron seems like it would be fairly speedy? Certainly
compared to my old i3/8gb tower. This may sound silly but in the VM
context, would a 12 core processor be excessive or would it be "fully
utilized" by Qubes?
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/663a4163cee48ba6c31a1f9c548f0185%40posteo.net.
For more options, visit https://groups.google.com/d/optout.
