Re: [Libreboot] libreboot write protected

[Daniel Tarrero]

wow dude, there's a full party into I-ME :S
i send this to the list, maybe other's interested too :)

The PDF from Igor Skochinsky that i found in the link you send me is
full of great resources! recommended (foot notes) <<<<<<<< ++ !!!!

if i've understand you right, we want to break intel's ME. We can call
that "write protection" firmware, but maybe i will call it "faulty
firmware to break intel's ME and avoid future changes vía software".

Now is time to check the resoults :)

i have this for windows, maybe can help you (could this be launched from
hiren's cd boot live windows XP? u will tell ;):
https://downloadcenter.intel.com/download/19009/Intel-Management-Engine-Verification-Utility

i also see in the kernel documentation that there is a module able to
talk to intel's ME (probably not fully tested, not fully featured, but
can give you some "working-notworking" scenarios.
https://www.kernel.org/doc/Documentation/misc-devices/mei/mei.txt 




El jue, 28-01-2016 a las 14:14 +0300, Chris Gask escribió:
> https://libreboot.org/docs/hcl/gm45_remove_me.html 
> 
> Above link is about preparing write protect libreboot.
> 
> 
>         Thursday, January 28, 2016 11:57 AM +01:00 from Daniel Tarrero
>         <address@hidden>:
>         
>         i'm not sure if there is something like "write protected
>         firmware".
>         
>         maybe it's more something like "signed firmware which detects
>         when
>         itself gets modified".
>         
>         please send a link to documentation about this "write
>         protection" you
>         want to play with!
>         
>         D
>         
>         
>         El mar, 26-01-2016 a las 21:06 +0300, Chris Gask escribió:
>         > Hi,
>         > 
>         > I have flashed libreboot. Rom image was prepared as to be
>         "write
>         > protect".
>         > 
>         > Anyway once command was entered "dmidecode" there is info
>         "bios
>         > upgradeable".
>         > 
>         > It only let say false positive? Or something went wrong and
>         bios is
>         > indeed upgradeable?
>         > 
>         > thanks
>         > 
>         
>         
>         
>         
>