Re: [qubes-users] Coreboot: Security for external monitor

2022-08-17 Thread airelemental via qubes-users
Aug 14, 2022, 7:46 PM by 169...@gmail.com: > Hello friends, > > Laptop w520 thinkpad corebooted. > > I would like to be able to use an external monitor connected by the > displayport. > > This coreboot tutorial > https://www.coreboot.org/Board:lenovo/w520 > suggest to run the following command:

[qubes-users] Coreboot: Security for external monitor

2022-08-14 Thread Franz
Hello friends, Laptop w520 thinkpad corebooted. I would like to be able to use an external monitor connected by the displayport. This coreboot tutorial https://www.coreboot.org/Board:lenovo/w520 suggest to run the following command: sudo ./util/nvramtool/nvramtool -w hybrid_graphics_mode="Dual

Re: [qubes-users] Coreboot?

2019-08-09 Thread 799
Hello, schrieb am Di., 6. Aug. 2019, 00:42: > So like installing coreboot should eliminate any malware installed at > firmware levels, right? > I would not use the very strong claim "any", because I can't backup this claim through knowledge (I am not a security specialist). But using coreboot w

Re: [qubes-users] Coreboot?

2019-08-05 Thread ljul8047
So like installing coreboot should eliminate any malware installed at firmware levels, right? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubsc

Re: [qubes-users] Coreboot?

2019-08-05 Thread ljul8047
Thanks a lot for the reply. So if the previous owner’s dom0/laptop was infected, it wouldn’t have any effect on me if I change the SSD and install coreboot, am I understanding right? I apologise for my ignorance on this topic, I’m learning only now. -- You received this message because you are

Re: [qubes-users] Coreboot?

2019-08-05 Thread 'awokd' via qubes-users
ljul8...@gmail.com: > I was told that buying an used laptop represents an extra risk since the > previous owner could have used the laptop with Qubes and got dom0 infected. There's some terminology mixed up here. Qubes' dom0 is part of the operating system, not the hardware. A Qubes dom0 infectio

Re: [qubes-users] Coreboot?

2019-08-05 Thread 799
Hello, On Mon, 5 Aug 2019 at 22:58, wrote: > I was told that buying an used laptop represents an extra risk since the > previous owner could have used the laptop with Qubes and got dom0 infected. > After a little bit of research, I was told that installing coreboot would > eliminate/delete any m

[qubes-users] Coreboot?

2019-08-05 Thread ljul8047
I was told that buying an used laptop represents an extra risk since the previous owner could have used the laptop with Qubes and got dom0 infected. After a little bit of research, I was told that installing coreboot would eliminate/delete any malware that, in a hypothetical case, took control o

Re: [qubes-users] coreboot on modern hardware?

2019-04-08 Thread taii...@gmx.com
System seventysuck, pur.idiots etc are LYING about having "open source firmware" System seventysuck also lies about having "made in usa" hardware literally all they did was make a metal case here and somehow a metal box equals a computer in their world. Their "coreboot" is nothing more than a wra

Re: [qubes-users] coreboot on modern hardware?

2019-04-06 Thread 'awokd' via qubes-users
Chris Laprise wrote on 4/6/19 2:08 PM: On 3/30/19 3:47 PM, 'awokd' via qubes-users wrote: Chris Laprise wrote on 3/30/19 7:10 PM: BTW, like some other Qubers I got a G505s with the AMD A10. Still need to figure out how to flash it. Mike Banon's done some great work here. Check out http://d

Re: [qubes-users] coreboot on modern hardware?

2019-04-06 Thread Chris Laprise
On 3/30/19 3:47 PM, 'awokd' via qubes-users wrote: Chris Laprise wrote on 3/30/19 7:10 PM: I agree. But even so, AMD are better by some noticeable margin. Intel... OMGWTF. With the 'VISA' exploit they're contradicting the researchers, and with 'Foreshadow' they said app programmers should de

Re: [qubes-users] coreboot on modern hardware?

2019-03-30 Thread 'awokd' via qubes-users
Chris Laprise wrote on 3/30/19 7:10 PM: I agree. But even so, AMD are better by some noticeable margin. Intel... OMGWTF. With the 'VISA' exploit they're contradicting the researchers, and with 'Foreshadow' they said app programmers should deal with it. I saw that too WRT Foreshadow: "Just c

Re: [qubes-users] coreboot on modern hardware?

2019-03-30 Thread Chris Laprise
On 3/30/19 12:25 PM, 'awokd' via qubes-users wrote: Chris Laprise wrote on 3/30/19 2:44 AM: On 3/29/19 7:18 PM, jrsmi...@gmail.com wrote: https://github.com/system76/coreboot Clearly they think they can handle modern hardware. Makes me wonder why the coreboot folks have thrown up [their?] han

Re: [qubes-users] coreboot on modern hardware?

2019-03-30 Thread 'awokd' via qubes-users
Chris Laprise wrote on 3/30/19 2:44 AM: On 3/29/19 7:18 PM, jrsmi...@gmail.com wrote: https://github.com/system76/coreboot Clearly they think they can handle modern hardware. Makes me wonder why the coreboot folks have thrown up [their?] hands and declared defeat. If I understand it right, o

Re: [qubes-users] coreboot on modern hardware?

2019-03-29 Thread Chris Laprise
On 3/29/19 7:18 PM, jrsmi...@gmail.com wrote: https://github.com/system76/coreboot Clearly they think they can handle modern hardware. Makes me wonder why the coreboot folks have thrown up Thierry hands and declared defeat. Maybe they see something they can no longer stomach. I bought my fir

Re: [qubes-users] coreboot on modern hardware?

2019-03-29 Thread jrsmiley
https://github.com/system76/coreboot Clearly they think they can handle modern hardware. Makes me wonder why the coreboot folks have thrown up Thierry hands and declared defeat. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe fr

Re: [qubes-users] coreboot on modern hardware?

2019-03-29 Thread jrsmiley
>From a recent System76 announcement: “In firmware news, our engineer Jeremy has made a lot of progress in porting Coreboot to the Darter Pro and multiple versions of Galago Pro. It can now run both BIOS and UEFI implementations. However, certain bugs need to be worked out before we can officia

Re: [qubes-users] coreboot on modern hardware?

2019-03-28 Thread Chris Laprise
On 3/28/19 3:51 PM, Sven Semmler wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 3/25/19 4:49 PM, jrsmi...@gmail.com wrote: What does this say about the direction Joanna and Golem are taking? I am severely confused about that. I'd have thought the direction to go is open hardware, m

Re: [qubes-users] coreboot on modern hardware?

2019-03-28 Thread Sven Semmler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 3/25/19 4:49 PM, jrsmi...@gmail.com wrote: > What does this say about the direction Joanna and Golem are > taking? I am severely confused about that. I'd have thought the direction to go is open hardware, more local, more decentralized, more comp

Re: [qubes-users] coreboot on modern hardware?

2019-03-25 Thread jrsmiley
What does this say about the direction Joanna and Golem are taking? Everyone build clouds on Intel hardware. No getting around that. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from

Re: [qubes-users] coreboot on modern hardware?

2019-03-25 Thread Chris Laprise
On 3/23/19 3:03 PM, jrsmi...@gmail.com wrote: Spent several hours yesterday trying to track down what I would need to do to install coreboot on all of my computers, starting with my Qubes box: a Levnovo Thinkpad T480. The bottom line from what I can tell is that if you have an Intel CPU made

Re: [qubes-users] coreboot on modern hardware?

2019-03-24 Thread 799
Hello, schrieb am Mo., 25. März 2019, 02:15: > That was one of the first places I looked. Maybe I’m just a hardhead, but > I found it difficult to believe that there really was no support for > coreboot in any form for modern hardware. > The problem seems to be that on modern hardware it is not

Re: [qubes-users] coreboot on modern hardware?

2019-03-24 Thread jrsmiley
That was one of the first places I looked. Maybe I’m just a hardhead, but I found it difficult to believe that there really was no support for coreboot in any form for modern hardware. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubs

Re: [qubes-users] coreboot on modern hardware?

2019-03-24 Thread 799
Hello, schrieb am So., 24. März 2019, 10:11: > On 2019-03-23 19:03, jrsmi...@gmail.com wrote: > > Spent several hours yesterday trying to track down what I would need > > to do to install coreboot on all of my computers, starting with my > > Qubes box: a Levnovo Thinkpad T480. [...] > I'd sugge

Re: [qubes-users] coreboot on modern hardware?

2019-03-24 Thread ronpunz
On 2019-03-23 19:03, jrsmi...@gmail.com wrote: > Spent several hours yesterday trying to track down what I would need > to do to install coreboot on all of my computers, starting with my > Qubes box: a Levnovo Thinkpad T480. > > The bottom line from what I can tell is that if you have an Intel CPU

[qubes-users] coreboot on modern hardware?

2019-03-23 Thread jrsmiley
Spent several hours yesterday trying to track down what I would need to do to install coreboot on all of my computers, starting with my Qubes box: a Levnovo Thinkpad T480. The bottom line from what I can tell is that if you have an Intel CPU made since 2008 (any that have Boot Guard) or an AMD

[qubes-users] coreboot, grub2 and FDE (including /boot + pbkdf2). Is it possible for Qubes ?

2018-09-07 Thread violetedogeatbones
Hi, somebody tried something similar? Any tips/guides? Thanks. Installing Parabola or Arch GNU+Linux-Libre, with Full-Disk Encryption (including /boot) https://libreboot.org/docs/gnulinux/encrypted_parabola.html Installing Trisquel GNU+Linux with Full-Disk Encryption (including /boot) https:/

Re: [qubes-users] Coreboot + Qubes :: Best Practises / Coreboot docs page

2018-03-18 Thread Rusty Bird
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 799: > > $ build/cbfstool build/coreboot.rom add-int -i 0 -n > > etc/pci-optionrom-exec > > When do I need to run this? After building my Coreboot ROM? Yes, see payloads/external/SeaBIOS/seabios/docs/Runtime_config.md for a list of cbfs option

Re: [qubes-users] Coreboot + Qubes :: Best Practises / Coreboot docs page

2018-03-18 Thread 799
Sorry, last Email send in advance while writing... Hello Rusty, Rusty Bird schrieb am Sa., 17. März 2018, 23:18: SeaBIOS is nice. You can build it with CONFIG_SEABIOS_VGA_COREBOOT=y > (might be the default now), and completely disable dynamic loading of > any dubious option ROMs: > > $ buil

Re: [qubes-users] Coreboot + Qubes :: Best Practises / Coreboot docs page

2018-03-18 Thread 799
Hello Rusty, Rusty Bird schrieb am Sa., 17. März 2018, 23:18: > > SeaBIOS is nice. You can build it with CONFIG_SEABIOS_VGA_COREBOOT=y > (might be the default now), and completely disable dynamic loading of > any dubious option ROMs: > > $ build/cbfstool build/coreboot.rom add-int -i 0 -n >

Re: [qubes-users] Coreboot + Qubes :: Best Practises / Coreboot docs page

2018-03-17 Thread Rusty Bird
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 799: > Seabios or Grub and are there any special options which might make sense? SeaBIOS is nice. You can build it with CONFIG_SEABIOS_VGA_COREBOOT=y (might be the default now), and completely disable dynamic loading of any dubious option ROMs:

[qubes-users] Coreboot + Qubes :: Best Practises / Coreboot docs page

2018-03-17 Thread 799
Hello, I had Coreboot running on my X230 with Qubes 3.2 + Windows Dualboot and reflashed to stock room before installing Qubes 4. Now I want to reinstall Coreboot without using Dualboot, thereof I have more options regarding 2nd payload. Question: What is the best configuration to run Coreboot an

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-05 Thread taii...@gmx.com
On 11/06/2017 01:28 AM, 'Marek Jenkins' via qubes-users wrote: 63xx/43xx is fine as long as you include a microcode update, you need to use coreboot for those but it will do it automatically by default. Is that only the case with Coreboot BIOS or also with the stock BIOS ? Coreboot, not sure ab

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-05 Thread 'Marek Jenkins' via qubes-users
> 63xx/43xx is fine as long as you include a microcode update, you need to > use coreboot for those but it will do it automatically by default. Is that only the case with Coreboot BIOS or also with the stock BIOS ? > > I just told Holger I probably would postpone the installation of Coreboot,

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-05 Thread taii...@gmx.com
On 11/04/2017 09:12 PM, 'Marek Jenkins' via qubes-users wrote: What is the difference between Coreboot and Libreboot ? Philosophy, that's it. Coreboot is sterile and corporate (as evidenced by not only the quiet acceptance of boards with closed source init but the removal of older open source

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
On Sunday, November 5, 2017 at 1:55:04 AM UTC+1, tai...@gmx.com wrote: > On 11/04/2017 08:42 PM, 'Marek Jenkins' via qubes-users wrote: > > > If I choose an older mainboard from AMD for example, which doesn't have all > > those bad technologies built-in, I am still much more secure than the > >

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
On Sunday, November 5, 2017 at 1:55:04 AM UTC+1, tai...@gmx.com wrote: > On 11/04/2017 08:42 PM, 'Marek Jenkins' via qubes-users wrote: > > > If I choose an older mainboard from AMD for example, which doesn't have all > > those bad technologies built-in, I am still much more secure than the > >

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
> > What is the difference between Coreboot and Libreboot ? > Philosophy, that's it. > > Coreboot is sterile and corporate (as evidenced by not only the quiet > acceptance of boards with closed source init but the removal of older > open source boards from the tree, most people in the project and

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread taii...@gmx.com
On 11/04/2017 08:42 PM, 'Marek Jenkins' via qubes-users wrote: If I choose an older mainboard from AMD for example, which doesn't have all those bad technologies built-in, I am still much more secure than the average guy with a new Intel CPU, right ? Yeah definitely. For instance a H8SCM can

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
On Sunday, November 5, 2017 at 12:10:26 AM UTC+1, Holger Levsen wrote: > On Sat, Nov 04, 2017 at 03:53:32PM -0700, 'Marek Jenkins' via qubes-users > wrote: > > so from my understanding, "blobs" is a synonym for proprietary code, right ? > > it's a synonym for "binary object" where in general you

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread taii...@gmx.com
On 11/04/2017 01:57 PM, 'Marek Jenkins' via qubes-users wrote: What is the difference between Coreboot and Libreboot ? Philosophy, that's it. Coreboot is sterile and corporate (as evidenced by not only the quiet acceptance of boards with closed source init but the removal of older open sourc

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread Holger Levsen
On Sat, Nov 04, 2017 at 03:53:32PM -0700, 'Marek Jenkins' via qubes-users wrote: > so from my understanding, "blobs" is a synonym for proprietary code, right ? it's a synonym for "binary object" where in general you don't have the source code. > I mean if it doesn't really matter for security I

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
On Saturday, November 4, 2017 at 10:47:12 PM UTC+1, Holger Levsen wrote: > On Sat, Nov 04, 2017 at 10:57:30AM -0700, 'Marek Jenkins' via qubes-users > wrote: > > What is the difference between Coreboot and Libreboot ? > > Libreboot is Coreboot with all the non-free blobs removed (and no free > so

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread Holger Levsen
On Sat, Nov 04, 2017 at 10:57:30AM -0700, 'Marek Jenkins' via qubes-users wrote: > What is the difference between Coreboot and Libreboot ? Libreboot is Coreboot with all the non-free blobs removed (and no free software added instead). So if you happen to have hardware which needs those blobs, you

[qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
What is the difference between Coreboot and Libreboot ? Is one better than the other for Qubes OS ? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+u

Re: [qubes-users] Coreboot+SeaBIOS and AEM

2017-08-24 Thread taii...@gmx.com
This would be a posting for the coreboot mailing list if the default TPM setup instructions are not working for you. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email

[qubes-users] Coreboot+SeaBIOS and AEM

2017-08-24 Thread Finsh
Hello Guys, i want to configure AEM for my x230.I added TPM support when i was configurating coreboot, however, im not able to take ownership etc.Also im unable to find anything according AEM in the coreboot wiki. Is there maybe someone with the same setup who is willingly to give me some hints