From eaac951721f9c36f29fd67f3b320b87036e9d744 Mon Sep 17 00:00:00 2001 From: Leah Rowe Date: Sun, 1 May 2022 16:13:34 +0100 Subject: [PATCH] clean up the faq --- site/faq.md | 30 ++---------------------------- 1 file changed, 2 insertions(+), 28 deletions(-) diff --git a/site/faq.md b/site/faq.md index 6aaab45..3e71e29 100644 --- a/site/faq.md +++ b/site/faq.md @@ -199,30 +199,6 @@ What systems are compatible with libreboot? See the [hardware compatibility list](docs/hardware/). -Will the Purism laptops be supported? ----------------------------------------------------------------------- - -Short answer: no. - -There are severe privacy, security and freedom issues with these laptops, due -to the Intel chipsets that they use. See: - -- [Intel Management Engine](#intelme) -- [More freedom issues on modern Intel hardware](#intel) - -Most notably, these laptops also use the Intel FSP binary blob, for the entire -hardware initialization. Coreboot does support a particular revision of one of -their laptops, but most are either unsupported or rely on binary blobs for most -of the hardware initialization. - -In particular, the Intel Management Engine is a severe threat to privacy and -security, not to mention freedom, since it is a remote backdoor that provides -Intel remote access to a computer where it is present. - -Intel themselves even admitted it, publicly. - -The Libreboot project recommends avoiding all hardware sold by Purism. - Why is the latest Intel hardware unsupported in libreboot? {#intel} ----------------------------------------------------------- @@ -240,12 +216,10 @@ architecture, with the ME firware written for x86 based on the Minix operating system. However, the overall design philosophy and operation is mostly the same. -On *most* current Intel platforms that have Intel ME, it is possible to -partly disable it. See: +On *most* current Intel platforms that have Intel ME, it is now possible +to disable Intel ME after BringUp. See: \ -NOTE: on those systems, the ME firmware is still needed in the boot flash, and -since it is a binary blob, those systems are not supported in Libreboot. On all Libreboot systems that have an Intel ME in it (GM45+ICH9M laptops and X4X+ICH10 desktops), the ME firmware is not needed in the boot flash. Either a