Re: [qubes-users] HCL - Purism Librem 13 v2

On 11/17/2018 02:23 AM, 799 wrote: > Hello, > > Am Sa., 17. Nov. 2018, 02:50 hat taii...@gmx.com > geschrieben: > >> [...] >> ME/PSP is impossible to disable on modern x86 anyone who tries is >> wasting money and setting back the freedom computing movement but the >> pur.idiots seem to not

Re: [qubes-users] HCL - Purism Librem 13 v2

On 11/17/2018 02:06 AM, 799 wrote:> Hello Taiidan, > > Am Sa., 17. Nov. 2018, 03:21 hat taii...@gmx.com > geschrieben: > >> [...] >> I am the counterpart to you guys somehow getting the tech media to >> publish glorified press releases for you and everything I say is true. >> > > Which articles

Re: [qubes-users] HCL - Purism Librem 13 v2

On 11/15/18 4:47 PM, Thierry Laurion wrote: I would strongly advise digging into the skulls project anyone interested in flashing coreboot into their x230 themselves : https://github.com/merge/skulls/blob/master/README.md Hi, They suggest updating the original BIOS before flashing Skull. But

Re: [qubes-users] HCL - Purism Librem 13 v2

Hello, Am Sa., 17. Nov. 2018, 02:50 hat taii...@gmx.com geschrieben: > [...] > ME/PSP is impossible to disable on modern x86 anyone who tries is > wasting money and setting back the freedom computing movement but the > pur.idiots seem to not really care about that anyways. > So do you think it

Re: [qubes-users] HCL - Purism Librem 13 v2

Hello Taiidan, Am Sa., 17. Nov. 2018, 03:21 hat taii...@gmx.com geschrieben: > [...] > I am the counterpart to you guys somehow getting the tech media to > publish glorified press releases for you and everything I say is true. > Which articles do you mean? People need to know the truth about

Re: [qubes-users] HCL - Purism Librem 13 v2

Hello Thierry, Am Do., 15. Nov. 2018, 10:47 hat Thierry Laurion geschrieben: > [...] > I would strongly advise digging into the skulls project anyone interested > in flashing coreboot into their x230 themselves : > https://github.com/merge/skulls/blob/master/README.md > [...] > I have already

Re: [qubes-users] HCL - Purism Librem 13 v2

RE: people who work for purism say i am being unfair I am the counterpart to you guys somehow getting the tech media to publish glorified press releases for you and everything I say is true. People need to know the truth about what they would be purchasing, this issue isn't and never was the

Re: [qubes-users] HCL - Purism Librem 13 v2

On 11/10/2018 01:33 PM, 'casiu' via qubes-users wrote: > > "We have four ME modules remaining to liberate (and anyone with access to our > BIOS ROM or our BIOS build script > can confirm those claims)." > > Last time i checked Intel still did not hand you over their signing-keys ? > Im happy

Re: [qubes-users] HCL - Purism Librem 13 v2

On Thu, Nov 15, 2018 at 10:07:31AM +0100, qubes-...@tutanota.com wrote: > > has this (updating the HCL for Librem 13v2) happend now? this was and is my point, here+now. -- cheers, Holger ---

Re: [qubes-users] HCL - Purism Librem 13 v2

On November 14, 2018 9:14:58 PM UTC, 799 wrote: >Hello 22rip, > >Am Mo., 12. Nov. 2018, 03:26 hat <22...@tutamail.com> geschrieben: > >> (...) >> However I think your "..Pretty easy to maintain.." would be hell for >me. >> (...) >> I checked out the x230 and you are right they are available and

Re: [qubes-users] HCL - Purism Librem 13 v2

Hi Holger, if this point was to me :), sorry for "hijacking" the thread. The flame about Purism laptops here got a bit hot with RYF-puristic guys last time, and the questions (one can work with), were mostly unanswered. But they were basically right. Just to remind you, I had a conversation

Re: [qubes-users] HCL - Purism Librem 13 v2

On Sat, Nov 10, 2018 at 09:24:40AM -0800, Kyle Rankin wrote: > It's a shame this thread got hijacked by people... [...discussing other stuff...] > Could someone who is responsible for the HCL please update it with the data > I've provided in this thread? This would update the HCL with a version

Re: [qubes-users] HCL - Purism Librem 13 v2

Hello 22rip, Am Mo., 12. Nov. 2018, 03:26 hat <22...@tutamail.com> geschrieben: > (...) > However I think your "..Pretty easy to maintain.." would be hell for me. > (...) > I checked out the x230 and you are right they are available and cheap. I > would still be interested in finding some

Re: [qubes-users] HCL - Purism Librem 13 v2

Hi Thierry, thank you for your excellent and extensive explanation of the topic, just wow! This is precisely what semi-techs as me need, to understand the heavy-tech topics more. It helped me to see the differences in between vt-d1 vs vt-d2 and its implications. Yes, the X200 is excellent for

Re: [qubes-users] HCL - Purism Librem 13 v2

Hi all, Sorry to have misadvertised Purism work. Didn't went across that post: https://puri.sm/posts/neutralizing-intel-management-engine-on-librem-laptops/ So it seems that Intel ME deactivation is on par with Ivy bridge, resulting in only the ROMP and BUP modules being required to initialize ME.

Re: [qubes-users] HCL - Purism Librem 13 v2

Hi qubes-fan. Answers inline. On Tue, Nov 13, 2018 at 6:27 AM wrote: > Hi Thiery, I wasn't aware the X230 can be freed same way as the X200 can. Unfortunately, the x230 cannot have Intel ME deleted the same way the x200 can, even though binary free firmware is par with it. The x200 is RYF

Re: [qubes-users] HCL - Purism Librem 13 v2

I tought about buying the x230, but for me, the screen is a little to small, and i feel like the x230 looks a bit ugly *.* To me apple-products look the best, but apparently there are none with coreboot. I therefor bought myself an X1 Carbon with a nitrokey from cryptogs.de , altough id like to

Re: [qubes-users] HCL - Purism Librem 13 v2

Hi Thiery, I wasn't aware the X230 can be freed same way as the X200 can. As you saw, I am thinking about buying the RYF https://tehnoetic.com/tet-t400s to be able to run with the Qubes 4. The T400s has but unfortunately 8GB RAM max and so the X230 with 16GB

Re: [qubes-users] HCL - Purism Librem 13 v2

Sorry to jump out of the Purism thing. Some weeks ago I put here the question too and it was bit stormy, so I keep it aside. Mate, you mention the "Lenova 400 series". That was my question short before in my post. I am planning to buy this guy: https://tehnoetic.com/tet-t400s

Re: 'invisible' blobs are blobs too (Re: [qubes-users] HCL - Purism Librem 13 v2)

I have to say, while im happy to see people are actually trying to get a constructive discussion here, im missing facts, sources and numbers. The only blob in an X230 which could be security relevant  imo is the embedded controller. The EC will most likely be liberated in the near future, and

Re: 'invisible' blobs are blobs too (Re: [qubes-users] HCL - Purism Librem 13 v2)

On Mon, Nov 12, 2018 at 09:58:25AM +, Holger Levsen wrote: > On Sun, Nov 11, 2018 at 03:45:21PM +, unman wrote: > > lenovo x230s are still widely available, and great for Qubes. > > while I agree with that, I want to point out that they contain several > non free blobs which cannot be

'invisible' blobs are blobs too (Re: [qubes-users] HCL - Purism Librem 13 v2)

On Sun, Nov 11, 2018 at 03:45:21PM +, unman wrote: > lenovo x230s are still widely available, and great for Qubes. while I agree with that, I want to point out that they contain several non free blobs which cannot be changed. just because there was so much purism bashing in this thread. :-D

Re: [qubes-users] HCL - Purism Librem 13 v2

Hi! > I checked out the x230 and you are right they are available and cheap. I > would still be interested in finding some company/individual who I can > trust to take care of the BIOS flashing for me as a service(I would think > others would also want this service as well...). The problem is

Re: [qubes-users] HCL - Purism Librem 13 v2

Unman your posts have been extremely helpful to me and I can't thank you enough for the help(I am sure many others would agree). However I think your "..Pretty easy to maintain.." would be hell for me. Librem(and maybe the Majora line) have huge appeal for me as they take care of the BIOS

Re: [qubes-users] HCL - Purism Librem 13 v2

On Sat, Nov 10, 2018 at 09:07:42PM -0800, 22...@tutamail.com wrote: > Tough questions and discussion but in the spirit of finding the "best" we can > get laptop for Qubes 4.0 (Best being defined as: available to purchase, > priced right, most open, most "reasonably" secure and"reasonably

Re: [qubes-users] HCL - Purism Librem 13 v2

Tough questions and discussion but in the spirit of finding the "best" we can get laptop for Qubes 4.0 (Best being defined as: available to purchase, priced right, most open, most "reasonably" secure and"reasonably simple" to maintain), for me I see the following as my best options,

Re: [qubes-users] HCL - Purism Librem 13 v2

On Sat, Nov 10, 2018 at 11:33:48AM -0800, Kyle Rankin wrote: > > > Also, i wasnt able to find a statement of Purism about the fact that, in > > the beginning, they claimed the ME was "completely disabled and removed". I > > mean, that was obviously not true right? > > I can only comment on the

Re: [qubes-users] HCL - Purism Librem 13 v2

I would have preferred to keep this thread focused on the HCL and not get too derailed off-topic. I'll try to keep this brief and apologies to the moderators for continuing the off-topic thread. I'll give a reply and then leave it. As someone who's working inside the org every day earnestly to

Re: [qubes-users] HCL - Purism Librem 13 v2

"We have four ME modules remaining to liberate (and anyone with access to our BIOS ROM or our BIOS build script can confirm those claims)." Last time i checked Intel still did not hand you over their signing-keys ? Im happy to change my mind, please educate me.:) Is the ME completely shut off

Re: [qubes-users] HCL - Purism Librem 13 v2

On Sat, Nov 10, 2018 at 09:24:40AM -0800, Kyle Rankin wrote: > It's a shame this thread got hijacked by people slandering the company. indeed. > PS. For what it's worth we continue to work earnestly behind the scenes to > liberate the remaining binary blobs (FSP and what remains of the ME after

Re: [qubes-users] HCL - Purism Librem 13 v2

It's a shame this thread got hijacked by people slandering the company. Could someone who is responsible for the HCL please update it with the data I've provided in this thread? This would update the HCL with a version of the Librem 13v2 that provides a TPM for people who are considering running

Re: [qubes-users] HCL - Purism Librem 13 v2

qubes-...@tutanota.com: > Looks like it is a bit of a blind way. To use the reasonably secure OS > without possibility to use it on the reasonably secure HW, is an issue which > needs to be addressed a bit. I originally guessed that Qubes would run on the > RYF devices well, and I am quite

Re: [qubes-users] HCL - Purism Librem 13 v2

taii...@gmx.com: > On 09/16/2018 02:51 AM, 'awokd' via qubes-users wrote: >> At present, RYF has not certified any laptops with hardware capable of >> running Qubes 4.0, but there are a couple older AMDs that can. A scale of >> hardware openness/owner control from most to least would be

Re: [qubes-users] HCL - Purism Librem 13 v2

Looks like it is a bit of a blind way. To use the reasonably secure OS without possibility to use it on the reasonably secure HW, is an issue which needs to be addressed a bit. I originally guessed that Qubes would run on the RYF devices well, and I am quite surprised it doesn't (doesnt it?).

Re: [qubes-users] HCL - Purism Librem 13 v2

On 09/16/2018 02:51 AM, 'awokd' via qubes-users wrote: > On Sat, September 15, 2018 10:30 am, qubes-...@tutanota.com wrote: >> Hi, during my email conversation with the Todd Weaver That liar comes out of nowhere with his super slick marketing and sets the computing freedom movement back 10

Re: [qubes-users] HCL - Purism Librem 13 v2

It is offtopic, but I gues he is referring to the need to run JS to have Protonmail running with web-browser and register, or a need to run Bridge to use the Thenderbird. The JS can be anytime replaced with a malicious one and it is game over. All clear but it really depends on the OPSEC one

Re: [qubes-users] HCL - Purism Librem 13 v2

> > This made me laugh out loud. All your ranting and raving about security and > dishonesty, and you sent the message using PROTON MAIL. Good lord. Talk about > dishonesty and pseudo-security. Off Topic - but... would you care to elaborate what fault you alleged in Protonmail and your

Re: [qubes-users] HCL - Purism Librem 13 v2

On Sat, September 15, 2018 10:30 am, qubes-...@tutanota.com wrote: > Hi, during my email conversation with the Todd Weaver in the > pre-IME-disabled time, he told me they will fully disable the IME and AMT > within next week. After about a week they announced they did just that. > Are this links a

Re: [qubes-users] HCL - Purism Librem 13 v2

You are confusing security with privacy. Im using protonmail, because its one of the very few Email-provider where one is able to register an account without providing any personal data. I dont have the need nor time nor skill to setup / maintain a emailserver. Simply because i distrust

Re: [qubes-users] HCL - Purism Librem 13 v2

On Saturday, September 15, 2018 at 8:32:23 AM UTC-7, casiu wrote: > Sent with ProtonMail Secure Email. > > ‐‐‐ Original Message ‐‐‐ > On Saturday, September 15, 2018 10:30 AM, wrote: > > > Hi, during my email conversation with the Todd Weaver in the > > pre-IME-disabled time, he told

Re: [qubes-users] HCL - Purism Librem 13 v2

Unfortunately,yes, those links are definitely a lie. I not going to even comment their dishonest advertising-language, but in short: there is a huge difference between removing something for good ore verifying that there most likely hasnt been changed anything. Also, the intel ME thing is from

Re: [qubes-users] HCL - Purism Librem 13 v2

Hi, during my email conversation with the Todd Weaver in the pre-IME-disabled time, he told me they will fully disable the IME and AMT within next week. After about a week they announced they did just that. Are this links a lie?

Re: [qubes-users] HCL - Purism Librem 13 v2

Everyone please be aware that purism's marketing is dishonest. Their products do not have open source firmware[1] and the ME is not disabled (the kernel still runs along with mask roms and the me hw init code) Intel chips or any new x86 for that matter do NOT respect your privacy! [1]Their