Re: [qubes-users] Coreboot?

2019-08-09 Thread 799
Hello, schrieb am Di., 6. Aug. 2019, 00:42: > So like installing coreboot should eliminate any malware installed at > firmware levels, right? > I would not use the very strong claim "any", because I can't backup this claim through knowledge (I am not a security specialist). But using coreboot

Re: [qubes-users] Coreboot?

2019-08-05 Thread ljul8047
So like installing coreboot should eliminate any malware installed at firmware levels, right? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: [qubes-users] Coreboot?

2019-08-05 Thread ljul8047
Thanks a lot for the reply. So if the previous owner’s dom0/laptop was infected, it wouldn’t have any effect on me if I change the SSD and install coreboot, am I understanding right? I apologise for my ignorance on this topic, I’m learning only now. -- You received this message because you

Re: [qubes-users] Coreboot?

2019-08-05 Thread 'awokd' via qubes-users
ljul8...@gmail.com: > I was told that buying an used laptop represents an extra risk since the > previous owner could have used the laptop with Qubes and got dom0 infected. There's some terminology mixed up here. Qubes' dom0 is part of the operating system, not the hardware. A Qubes dom0

Re: [qubes-users] Coreboot?

2019-08-05 Thread 799
Hello, On Mon, 5 Aug 2019 at 22:58, wrote: > I was told that buying an used laptop represents an extra risk since the > previous owner could have used the laptop with Qubes and got dom0 infected. > After a little bit of research, I was told that installing coreboot would > eliminate/delete any

Re: [qubes-users] coreboot on modern hardware?

2019-04-08 Thread taii...@gmx.com
System seventysuck, pur.idiots etc are LYING about having "open source firmware" System seventysuck also lies about having "made in usa" hardware literally all they did was make a metal case here and somehow a metal box equals a computer in their world. Their "coreboot" is nothing more than a

Re: [qubes-users] coreboot on modern hardware?

2019-04-06 Thread 'awokd' via qubes-users
Chris Laprise wrote on 4/6/19 2:08 PM: On 3/30/19 3:47 PM, 'awokd' via qubes-users wrote: Chris Laprise wrote on 3/30/19 7:10 PM: BTW, like some other Qubers I got a G505s with the AMD A10. Still need to figure out how to flash it. Mike Banon's done some great work here. Check out

Re: [qubes-users] coreboot on modern hardware?

2019-04-06 Thread Chris Laprise
On 3/30/19 3:47 PM, 'awokd' via qubes-users wrote: Chris Laprise wrote on 3/30/19 7:10 PM: I agree. But even so, AMD are better by some noticeable margin. Intel... OMGWTF. With the 'VISA' exploit they're contradicting the researchers, and with 'Foreshadow' they said app programmers should

Re: [qubes-users] coreboot on modern hardware?

2019-03-30 Thread 'awokd' via qubes-users
Chris Laprise wrote on 3/30/19 7:10 PM: I agree. But even so, AMD are better by some noticeable margin. Intel... OMGWTF. With the 'VISA' exploit they're contradicting the researchers, and with 'Foreshadow' they said app programmers should deal with it. I saw that too WRT Foreshadow: "Just

Re: [qubes-users] coreboot on modern hardware?

2019-03-30 Thread Chris Laprise
On 3/30/19 12:25 PM, 'awokd' via qubes-users wrote: Chris Laprise wrote on 3/30/19 2:44 AM: On 3/29/19 7:18 PM, jrsmi...@gmail.com wrote: https://github.com/system76/coreboot Clearly they think they can handle modern hardware. Makes me wonder why the coreboot folks have thrown up [their?]

Re: [qubes-users] coreboot on modern hardware?

2019-03-30 Thread 'awokd' via qubes-users
Chris Laprise wrote on 3/30/19 2:44 AM: On 3/29/19 7:18 PM, jrsmi...@gmail.com wrote: https://github.com/system76/coreboot Clearly they think they can handle modern hardware. Makes me wonder why the coreboot folks have thrown up [their?] hands and declared defeat. If I understand it right,

Re: [qubes-users] coreboot on modern hardware?

2019-03-29 Thread Chris Laprise
On 3/29/19 7:18 PM, jrsmi...@gmail.com wrote: https://github.com/system76/coreboot Clearly they think they can handle modern hardware. Makes me wonder why the coreboot folks have thrown up Thierry hands and declared defeat. Maybe they see something they can no longer stomach. I bought my

Re: [qubes-users] coreboot on modern hardware?

2019-03-29 Thread jrsmiley
https://github.com/system76/coreboot Clearly they think they can handle modern hardware. Makes me wonder why the coreboot folks have thrown up Thierry hands and declared defeat. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe

Re: [qubes-users] coreboot on modern hardware?

2019-03-29 Thread jrsmiley
>From a recent System76 announcement: “In firmware news, our engineer Jeremy has made a lot of progress in porting Coreboot to the Darter Pro and multiple versions of Galago Pro. It can now run both BIOS and UEFI implementations. However, certain bugs need to be worked out before we can

Re: [qubes-users] coreboot on modern hardware?

2019-03-28 Thread Chris Laprise
On 3/28/19 3:51 PM, Sven Semmler wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 3/25/19 4:49 PM, jrsmi...@gmail.com wrote: What does this say about the direction Joanna and Golem are taking? I am severely confused about that. I'd have thought the direction to go is open hardware,

Re: [qubes-users] coreboot on modern hardware?

2019-03-28 Thread Sven Semmler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 3/25/19 4:49 PM, jrsmi...@gmail.com wrote: > What does this say about the direction Joanna and Golem are > taking? I am severely confused about that. I'd have thought the direction to go is open hardware, more local, more decentralized, more

Re: [qubes-users] coreboot on modern hardware?

2019-03-25 Thread jrsmiley
What does this say about the direction Joanna and Golem are taking? Everyone build clouds on Intel hardware. No getting around that. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from

Re: [qubes-users] coreboot on modern hardware?

2019-03-25 Thread Chris Laprise
On 3/23/19 3:03 PM, jrsmi...@gmail.com wrote: Spent several hours yesterday trying to track down what I would need to do to install coreboot on all of my computers, starting with my Qubes box: a Levnovo Thinkpad T480. The bottom line from what I can tell is that if you have an Intel CPU made

Re: [qubes-users] coreboot on modern hardware?

2019-03-25 Thread 799
Hello, schrieb am Mo., 25. März 2019, 02:15: > That was one of the first places I looked. Maybe I’m just a hardhead, but > I found it difficult to believe that there really was no support for > coreboot in any form for modern hardware. > The problem seems to be that on modern hardware it is

Re: [qubes-users] coreboot on modern hardware?

2019-03-24 Thread jrsmiley
That was one of the first places I looked. Maybe I’m just a hardhead, but I found it difficult to believe that there really was no support for coreboot in any form for modern hardware. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To

Re: [qubes-users] coreboot on modern hardware?

2019-03-24 Thread 799
Hello, schrieb am So., 24. März 2019, 10:11: > On 2019-03-23 19:03, jrsmi...@gmail.com wrote: > > Spent several hours yesterday trying to track down what I would need > > to do to install coreboot on all of my computers, starting with my > > Qubes box: a Levnovo Thinkpad T480. [...] > I'd

Re: [qubes-users] coreboot on modern hardware?

2019-03-24 Thread ronpunz
On 2019-03-23 19:03, jrsmi...@gmail.com wrote: > Spent several hours yesterday trying to track down what I would need > to do to install coreboot on all of my computers, starting with my > Qubes box: a Levnovo Thinkpad T480. > > The bottom line from what I can tell is that if you have an Intel

Re: [qubes-users] Coreboot + Qubes :: Best Practises / Coreboot docs page

2018-03-18 Thread Rusty Bird
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 799: > > $ build/cbfstool build/coreboot.rom add-int -i 0 -n > > etc/pci-optionrom-exec > > When do I need to run this? After building my Coreboot ROM? Yes, see payloads/external/SeaBIOS/seabios/docs/Runtime_config.md for a list of cbfs

Re: [qubes-users] Coreboot + Qubes :: Best Practises / Coreboot docs page

2018-03-18 Thread 799
Sorry, last Email send in advance while writing... Hello Rusty, Rusty Bird schrieb am Sa., 17. März 2018, 23:18: SeaBIOS is nice. You can build it with CONFIG_SEABIOS_VGA_COREBOOT=y > (might be the default now), and completely disable dynamic loading of > any dubious

Re: [qubes-users] Coreboot + Qubes :: Best Practises / Coreboot docs page

2018-03-18 Thread 799
Hello Rusty, Rusty Bird schrieb am Sa., 17. März 2018, 23:18: > > SeaBIOS is nice. You can build it with CONFIG_SEABIOS_VGA_COREBOOT=y > (might be the default now), and completely disable dynamic loading of > any dubious option ROMs: > > $ build/cbfstool

Re: [qubes-users] Coreboot + Qubes :: Best Practises / Coreboot docs page

2018-03-17 Thread Rusty Bird
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 799: > Seabios or Grub and are there any special options which might make sense? SeaBIOS is nice. You can build it with CONFIG_SEABIOS_VGA_COREBOOT=y (might be the default now), and completely disable dynamic loading of any dubious option ROMs:

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-05 Thread taii...@gmx.com
On 11/06/2017 01:28 AM, 'Marek Jenkins' via qubes-users wrote: 63xx/43xx is fine as long as you include a microcode update, you need to use coreboot for those but it will do it automatically by default. Is that only the case with Coreboot BIOS or also with the stock BIOS ? Coreboot, not sure

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-05 Thread 'Marek Jenkins' via qubes-users
> 63xx/43xx is fine as long as you include a microcode update, you need to > use coreboot for those but it will do it automatically by default. Is that only the case with Coreboot BIOS or also with the stock BIOS ? > > I just told Holger I probably would postpone the installation of Coreboot,

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-05 Thread taii...@gmx.com
On 11/04/2017 09:12 PM, 'Marek Jenkins' via qubes-users wrote: What is the difference between Coreboot and Libreboot ? Philosophy, that's it. Coreboot is sterile and corporate (as evidenced by not only the quiet acceptance of boards with closed source init but the removal of older open

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
On Sunday, November 5, 2017 at 1:55:04 AM UTC+1, tai...@gmx.com wrote: > On 11/04/2017 08:42 PM, 'Marek Jenkins' via qubes-users wrote: > > > If I choose an older mainboard from AMD for example, which doesn't have all > > those bad technologies built-in, I am still much more secure than the > >

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
On Sunday, November 5, 2017 at 1:55:04 AM UTC+1, tai...@gmx.com wrote: > On 11/04/2017 08:42 PM, 'Marek Jenkins' via qubes-users wrote: > > > If I choose an older mainboard from AMD for example, which doesn't have all > > those bad technologies built-in, I am still much more secure than the > >

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
> > What is the difference between Coreboot and Libreboot ? > Philosophy, that's it. > > Coreboot is sterile and corporate (as evidenced by not only the quiet > acceptance of boards with closed source init but the removal of older > open source boards from the tree, most people in the project

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread taii...@gmx.com
On 11/04/2017 08:42 PM, 'Marek Jenkins' via qubes-users wrote: If I choose an older mainboard from AMD for example, which doesn't have all those bad technologies built-in, I am still much more secure than the average guy with a new Intel CPU, right ? Yeah definitely. For instance a H8SCM

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
On Sunday, November 5, 2017 at 12:10:26 AM UTC+1, Holger Levsen wrote: > On Sat, Nov 04, 2017 at 03:53:32PM -0700, 'Marek Jenkins' via qubes-users > wrote: > > so from my understanding, "blobs" is a synonym for proprietary code, right ? > > it's a synonym for "binary object" where in general

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread taii...@gmx.com
On 11/04/2017 01:57 PM, 'Marek Jenkins' via qubes-users wrote: What is the difference between Coreboot and Libreboot ? Philosophy, that's it. Coreboot is sterile and corporate (as evidenced by not only the quiet acceptance of boards with closed source init but the removal of older open

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread Holger Levsen
On Sat, Nov 04, 2017 at 03:53:32PM -0700, 'Marek Jenkins' via qubes-users wrote: > so from my understanding, "blobs" is a synonym for proprietary code, right ? it's a synonym for "binary object" where in general you don't have the source code. > I mean if it doesn't really matter for security I

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
On Saturday, November 4, 2017 at 10:47:12 PM UTC+1, Holger Levsen wrote: > On Sat, Nov 04, 2017 at 10:57:30AM -0700, 'Marek Jenkins' via qubes-users > wrote: > > What is the difference between Coreboot and Libreboot ? > > Libreboot is Coreboot with all the non-free blobs removed (and no free >

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread Holger Levsen
On Sat, Nov 04, 2017 at 10:57:30AM -0700, 'Marek Jenkins' via qubes-users wrote: > What is the difference between Coreboot and Libreboot ? Libreboot is Coreboot with all the non-free blobs removed (and no free software added instead). So if you happen to have hardware which needs those blobs, you