Hello,<br><br>Off-topic:<br>Top-posted as Protonmail Android App is still unable to correctly use inline answers without correct quote layout/line breaks. Bug has been reported months ago :-/<br><br>Taiidan wrote:<br><br>"(...) CPU's....without a fix there will <br>be only one coreboot compatible laptop with open source hardware <br>initiation that is remotely secure (...)"<br><br>Currently I am using two laptops for my work setup:<br>A 12.5" Lenovo X230 and a 15.x" Lenovo W540 both machines are running with Qubes OS 4rc3 and 16GB RAM. The W540 is a Dual-Boot system with Win10, the x230 is running Coreboot.<br><br>Honestly I am shocked and angry if there will be no Intel Updates for the X230 and W540.<br>On the other hand, if I am running Qubes and Coreboot, wouldn't this reduce the risk of Meltdown/Spectre attacks as Coreboot will protect me against remote attacks (stripped down AMT/Intel ME) and Qubes might reduce the attack surface as I am using several VMs and DVMs for browsing?<br><br>If I compare the Lenovo X230 to Lenovo G505s this looks like a step back: the G505s is targeted at another audience that Lenovo ThinkPad Users. It looks to me like an entry level desktop, which is also very bulky (without the additional performance of a W540).<br><br>CPU comparison X230 CPU vs G505s<br>http://www.cpu-world.com/Compare/725/AMD_A6-Series_for_Notebooks_A6-5350M_vs_Intel_Core_i5_Mobile_i5-3360M_(BGA).html<br><br>Also the G505s has less cores/no HT<br><br>Frustration. Can't "we" build one or maybe two crowd founded secure Laptops (12", 15.x") with reasonable specs, good keyboard, hardware kill switches, internal wan (kill-switchable)?<br>I can't think that choice is limited in 2018 to only 1 (in words "one") laptop modell, which is no nearly 5 years old (08/2013).<br><br>Brave new world.<br><br>[799]<br><br><br><br><br>Gesendet von ProtonMail mobile<br><br><br><br>-------- Original-Nachricht --------<br>An 11. Jan. 2018, 03:55, Taiidan@gmx.com schrieb:<blockquote class="protonmail_quote"><br><html><head></head><body>I am curious of any intel insiders know if there will be microcode
<br>updates released for older intel CPU's (ex: sandy/ivybridge) and failing
<br>that, what can be done in regards to securing them from meltdown/spectre.
<br>
<br>I believe this is a relevant coreboot topic considering how many
<br>coreboot boards have these and older CPU's....without a fix there will
<br>be only one coreboot compatible laptop with open source hardware
<br>initiation that is remotely secure (lenovo g505s as has a pre-PSP AMD
<br>CPU) and theoretically owner controllable (as the previous C2D/C2Q's
<br>such as the X200 are now permanently insecure without intervention from
<br>intel apparently)
<br>
<br>At this point even a massive performance loss is better than having to
<br>throw out so much now-useless hardware.
<br>
<br>
<br>--
<br>coreboot mailing list: coreboot@coreboot.org
<br>https://mail.coreboot.org/mailman/listinfo/coreboot
<br></body></html></div>