Conversation
if the framework had coreboot and a disabled IME I'd get it tbh but its asahi for me instead for now. hopefully ill get it soon!
1
0
0

Listens to Baroque while coding murder.exe newt

@georgia the latest coreboot release supports framework boards
1
0
0
@newt disabled IME is important to me too
1
0
0

Listens to Baroque while coding murder.exe newt

@georgia https://doc.coreboot.org/northbridge/intel/sandybridge/me_cleaner.html

Though, despite the attention IME gets, I’m yet to see a single case of it being exploited.
2
0
0
@newt @georgia >TPM malfunctioning
Wait, so you can't use secureboot without IME? That's a non-starter for me unfortunately
1
0
0
@yakmacker @georgia
>disable attestation firmware
>attestation no longer works

How could this happen? Why would Intel do this? akko_derp
1
0
4

Listens to Baroque while coding murder.exe newt

@georgia so, within 10 years or more that I’ve been hearing about IME, not a single person managed to stick a laptop inside a controlled lab and dump traffic that said IME allegedly sends home?
1
0
0
@newt thats a good point but its still an attack vecfor
1
0
0

Listens to Baroque while coding murder.exe newt

@georgia less so than Linux, especially given how many CVEs it sees.
1
0
1
@newt what laptop do you have? do you like the framework?
1
0
0

Listens to Baroque while coding murder.exe newt

@georgia a thinkpad. I’ve never touched framework tech. However, I know about the current state of Asahi and it’s just a mess.
1
0
0
@newt I used the original framework and I didnt like it much. right now I have a thinkpad x1 carbon and I'm not wowed by it.
0
0
0

Listens to Baroque while coding murder.exe newt

@georgia hardware support is still not 100%. Also, the devs aren’t the most stable kind.
1
0
0
@newt oh I knew both of those things lol. external monitor support is coming very soon, the only other things that dont work are lightning and the fingerprint reader both which I dont care for especially. starlabs is too expensive and the framework not having coreboot or the IME by default kinda seals the deal for me. I do anticipate great things from framework though!
0
0
0
@newt @georgia IME is meant to be different from attestation, but also it seems like the way its turned off is basically to corrupt a bunch of ROM so it's no wonder other stuff breaks.
1
0
0
@newt @georgia also I just realized you probably thought I meant like that's a nonstarter for secureboot but I meant its a nonstarter for cleaning out IME
0
0
1