Aqui debatemos bugs, features, novas aplicações do https://coletivos.org
Updated 2021-05-08 18:10:57 +02:00
Updated 2021-08-13 05:15:19 +02:00
Codebase for the Arch manual pages repository (read-only mirror)
Updated 2022-03-05 23:27:22 +01:00
Updated 2023-02-18 18:33:12 +01:00
omos but codeberg broke midway so we're trying again
Updated 2024-02-18 17:59:09 +01:00
Updated 2022-11-29 14:02:02 +01:00
Updated 2022-12-20 13:08:52 +01:00
Updated 2024-02-01 05:09:28 +01:00
mirror of https://codeberg.org/libreboot/pico-serprog used by lbmk
Updated 2024-02-11 20:27:12 +01:00
mirror of https://codeberg.org/libreboot/stm32-vserprog used by lbmk
Updated 2023-10-20 22:29:33 +02:00
Updated 2021-11-29 11:38:38 +01:00
Updated 2021-11-27 18:55:23 +01:00
Tool for partial deblobbing of Intel ME/TXE firmware images.
me_cleaner is a Python script able to modify an Intel ME firmware image with the final purpose of reducing its ability to interact with the system.
Intel ME
Intel ME is a co-processor integrated in all post-2006 Intel boards, which is the base hardware for many Intel features like Intel AMT, Intel Boot Guard, Intel PAVP and many others. To provide such features, it requires full access to the system, including memory (through DMA) and network access (transparent to the user).
Unlike many other firmware components, the Intel ME firmware can't be neither disabled nor reimplemented, as it is tightly integrated in the boot process and it is signed.
This poses an issue both to the free firmware implementations like coreboot, which are forced to rely on a proprietary, obscure and always-on blob, and to the privacy-aware users, who are reasonably worried about such firmware, running on the lowest privilege ring on x86.
What can be done
Before Nehalem (ME version 6, 2008/2009) the ME firmware could be removed completely from the flash chip by setting a couple of bits inside the flash descriptor, effectively disabling it.
Starting from Nehalem the Intel ME firmware can't be removed anymore: without a valid firmware the PC shuts off forcefully after 30 minutes, probably as an attempt to enforce the Intel Anti-Theft policies.
However, while Intel ME can't be turned off completely, it is still possible to modify its firmware up to a point where Intel ME is active only during the boot process, effectively disabling it during the normal operation, which is what me_cleaner tries to accomplish.
Updated 2024-06-28 15:36:37 +02:00
Updated 2022-01-10 16:09:08 +01:00
Updated 2022-01-14 04:21:10 +01:00