clean up the faq

hslick-master
Leah Rowe 2022-05-01 16:13:34 +01:00
parent 32918ba1ef
commit eaac951721
1 changed files with 2 additions and 28 deletions

View File

@ -199,30 +199,6 @@ What systems are compatible with libreboot?
See the [hardware compatibility list](docs/hardware/). See the [hardware compatibility list](docs/hardware/).
Will the Purism laptops be supported?
----------------------------------------------------------------------
Short answer: no.
There are severe privacy, security and freedom issues with these laptops, due
to the Intel chipsets that they use. See:
- [Intel Management Engine](#intelme)
- [More freedom issues on modern Intel hardware](#intel)
Most notably, these laptops also use the Intel FSP binary blob, for the entire
hardware initialization. Coreboot does support a particular revision of one of
their laptops, but most are either unsupported or rely on binary blobs for most
of the hardware initialization.
In particular, the Intel Management Engine is a severe threat to privacy and
security, not to mention freedom, since it is a remote backdoor that provides
Intel remote access to a computer where it is present.
Intel themselves even admitted it, publicly.
The Libreboot project recommends avoiding all hardware sold by Purism.
Why is the latest Intel hardware unsupported in libreboot? {#intel} Why is the latest Intel hardware unsupported in libreboot? {#intel}
----------------------------------------------------------- -----------------------------------------------------------
@ -240,12 +216,10 @@ architecture, with the ME firware written for x86 based on the Minix operating
system. However, the overall design philosophy and operation is mostly the system. However, the overall design philosophy and operation is mostly the
same. same.
On *most* current Intel platforms that have Intel ME, it is possible to On *most* current Intel platforms that have Intel ME, it is now possible
partly disable it. See: to disable Intel ME after BringUp. See:
<https://github.com/corna/me_cleaner>\ <https://github.com/corna/me_cleaner>\
NOTE: on those systems, the ME firmware is still needed in the boot flash, and
since it is a binary blob, those systems are not supported in Libreboot.
On all Libreboot systems that have an Intel ME in it (GM45+ICH9M laptops and On all Libreboot systems that have an Intel ME in it (GM45+ICH9M laptops and
X4X+ICH10 desktops), the ME firmware is not needed in the boot flash. Either a X4X+ICH10 desktops), the ME firmware is not needed in the boot flash. Either a