ThinkPad FAQ
Гайд по покупке Б/У ноутов ThinkPad.
Специально для ThinkPad треда на борде 2ch.hk/hw
И чата в Telegram: https://t.me/Thinkpad_thread
By t520 kun. Доработан Мной (ThinkpadThink/2696v3 kun) и pepe-i-shim (aka x220 kun)
На начало 2020 года гайд требует доработки и обновления
Updated 2024-06-28 15:59:31 +02:00
FAQ по приобретению ThinkPad на ebay.com
Данный гайд для тех, кто уже определился с тем, что ему нужен ThinkPad, подобрал себе модель и хочет подыскать варианты на всемирной барахолке. Вопросы выбора модели и знакомства с тем, что вообще такое Thinkpad-ы и чем они хороши выходят за рамки данного FAQ. Прочтите для начала гайд, рассказывающий о том, чем примечательны Thinkpad-ы и какие модели существуют и если заинтересует, возвращайтесь чтобы выяснить как их приобретать на ebay.
Updated 2024-06-28 15:48:01 +02:00
Flashing coreboot on thinkpads without external programmer.
This document describes known methods of flashing BIOS on Lenovo ThinkPads without external programmer. The main goal is flashing coreboot while running stock BIOS, but it may be used for flashing modified vendor BIOS as well.
Ivy Bridge series (X230, T430, etc.)
A guide for Ivy Bridge ThinkPads has also been merged to coreboot documentation, see here.
Old versions of stock BIOS for these models have several security issues. In context of this guide, two of them are of interest.
First is the fact the SMM_BWP and BLE are not enabled in BIOS versions released before 2014. I have tested many versions on T430 and X230 and found out that SMM_BWP=1 only since the update, the changelog of which contains following line:
(New) Improved the UEFI BIOS security feature.
Second is S3 Boot Script vulnerability, that was discovered and fixed later.
Updated 2024-06-28 15:44:38 +02:00
LiveUSB Bootable exploit chain to unlock all features of xx30 ThinkPad machines. WiFi Whitelist, Advanced Menu, Overclocking.
While the website is down this is the link for REV 5
Software-based "jailbreak" allowing all ivybridge-based xx30 thinkpads to softmod custom bios images.
This repo contains the main script and pre-compiled binary files used in the 1vyrain image to flash machines.
The main link to the ready to go live USB image can be found here.
Updates will be published here in the form of scripts that can be downloaded and run on the USB image.
Although 1vyrain has been very thoroughly tested and there were zero bricks during testing, there are some random quirks associated with bypassing normal flashing methods and things can always randomly go awry. There is no warranty or support guaranteed so please keep this in mind if you intend to use this software. I am not responsible for broken devices. Fortunately, it is impossible to permanently brick a device with this method. Worst case scenario, you can flash a backup or fresh BIOS using a hardware programmer.
Updated 2024-06-28 15:42:43 +02:00
Tool for partial deblobbing of Intel ME/TXE firmware images.
me_cleaner is a Python script able to modify an Intel ME firmware image with the final purpose of reducing its ability to interact with the system.
Intel ME
Intel ME is a co-processor integrated in all post-2006 Intel boards, which is the base hardware for many Intel features like Intel AMT, Intel Boot Guard, Intel PAVP and many others. To provide such features, it requires full access to the system, including memory (through DMA) and network access (transparent to the user).
Unlike many other firmware components, the Intel ME firmware can't be neither disabled nor reimplemented, as it is tightly integrated in the boot process and it is signed.
This poses an issue both to the free firmware implementations like coreboot, which are forced to rely on a proprietary, obscure and always-on blob, and to the privacy-aware users, who are reasonably worried about such firmware, running on the lowest privilege ring on x86.
What can be done
Before Nehalem (ME version 6, 2008/2009) the ME firmware could be removed completely from the flash chip by setting a couple of bits inside the flash descriptor, effectively disabling it.
Starting from Nehalem the Intel ME firmware can't be removed anymore: without a valid firmware the PC shuts off forcefully after 30 minutes, probably as an attempt to enforce the Intel Anti-Theft policies.
However, while Intel ME can't be turned off completely, it is still possible to modify its firmware up to a point where Intel ME is active only during the boot process, effectively disabling it during the normal operation, which is what me_cleaner tries to accomplish.
Updated 2024-06-28 15:36:37 +02:00
A list of Free Software network services and web applications which can be hosted on your own servers.
Updated 2024-06-26 18:56:54 +02:00
Guide to buying used ThinkPad laptops.
Especially for the ThinkPad track on the board 2ch.hk/hw
And Telegram chat: https://t.me/Thinkpad_thread
By t520 kun. Finalized by me (ThinkpadThink/2696v3 kun) and pepe-i-shim (aka x220 kun)
Updated 2024-06-26 18:44:28 +02:00
An open letter in support of Richard Matthew Stallman being reinstated by the Free Software Foundation.
Updated 2024-06-26 18:37:52 +02:00