UEFI Build requests - suggested help

[trinidad]

Adding to this discussion: as of May first this year Intel finally announced the patch for AMT and other firmware security vulnerabilities that has been present in all Intel cpu/mobo management firmware since 2006. I have yet to receive any notification of patch availability from Dell, HP, or Intel, even though I still manage a few enterprise networks. BIOS may be BIOS but processor management firmware is a whole 'nother beast. The lag is reported officially as 9 years but is indeed 11 years on some higher end HPs as far as I can tell. I personally don't think the patch appeared except for certain newer AMT versions.

TC

I forgot. Get the Linux repair tools here:

https://github.com/intel/INTEL-SA-00075-...tion-Tools

Adding again to this post: OEM support is spotty in my opinion at Dell and HP with several missing OEM machines that I know of personally and I have been to both sites. Finally I don't think the patch will prevent an "in the room exploit" via the MEBx recovery tools but we will just have to wait and see.

[TheDead]

3) OEM tracking can now be placed in a machine beyond the reach of your Linux system. AMD has already done this, and I doubt that Intel is far behind, and when they cross that bridge computing privacy will be utterly dead on their new machines, even running Debian.

Didn't Intel already do that with the unique CPU identifier in the Pentium3 (I think)? The option to disable this "feature" was the first thing motherboard manufacturer put in their BIOS. Other than Intel board of course.

There is no spoon!

[trinidad]

bitsnpcs:

The following are what I would consider utterly firmware free even in the kernel, but the performance limitations are real regarding specific OEM hardware because of this. There is really no monetary incentive for hardware manufacturers to cooperate with the Linux community, and I look for Intel to deepen its firmware crypt rather than go open source in the future. Technology cycles along with education, and gurus want to be paid. Money will lure many of the very best people away from ethical considerations. No one wants to admit it, but the only barrier to OEM hardware extortion practices is the US Government. A US law against such practices is the only solution. Hacking is headed for obsolescence and technology has utterly outrun its day to day dependent users. The balance of power has tipped heavily toward the most skilled, most educated, and wealthiest entities. US law is the only thing powerful enough to forestall an utter domination of the world by corporate technology entities. I personally feel the US Government has a basis for a class action suit against Intel, not to mention potential espionage charges. The real anarchists in the world today are companies like Intel. The damage done by tobacco, asbestos, and Wall St. banks, is nothing compared the damage done and to come from technology companies allowed to operate outside the reach of US law.

https://libreboot.org/
http://www.gnewsense.org/Main/HomePage

TC

[Valtam]

Well said.

Sent from my Mobile phone using Tapatalk