Hi,
let's say goodbye to all Intel notebooks produced by OEM's which are not Google ( Chromebooks ). Maybe the haswell/broadwell notebooks of Lenovo without U/Y processor can be used ( Thinkpad tXX xXX ). It depends if they are supporting Intel Boot Guard on the southbridge and if they are locked down...
Regards Zaolin
On 02/06/2015 06:29 AM, Zaolin wrote:
Hi,
new thinkpad's can't be used anymore for coreboot. Especially the U and Y Intel CPU Series. They come with Intel Boot Guard and you are won't be able to boot anything which is unsigned and not approved by OEM. This means the OEM are fusing SHA256 public key hashes into the southbridge.
For more details take a look at Intel Boot Guard architecture. It could be also confirmed by Secunet AG and Google.
Regards Zaolin
That's scary to say the least. No more Thinkpads for us...
On 02/06/2015 02:42 PM, Zaolin wrote:
Hi,
let's say goodbye to all Intel notebooks produced by OEM's which are not Google ( Chromebooks ). Maybe the haswell/broadwell notebooks of Lenovo without U/Y processor can be used ( Thinkpad tXX xXX ). It depends if they are supporting Intel Boot Guard on the southbridge and if they are locked down...
Regards Zaolin
On 02/06/2015 06:29 AM, Zaolin wrote:
Hi,
new thinkpad's can't be used anymore for coreboot. Especially the U and Y Intel CPU Series. They come with Intel Boot Guard and you are won't be able to boot anything which is unsigned and not approved by OEM. This means the OEM are fusing SHA256 public key hashes into the southbridge.
For more details take a look at Intel Boot Guard architecture. It could be also confirmed by Secunet AG and Google.
Regards Zaolin
That's scary to say the least. No more Thinkpads for us...
So the real question is: are there any AMD notebooks on the market with similar build quality to the old IBM Thinkpads? I've about had enough of Intel and their monopolistic ways.
On 07.02.2015 21:14, Timothy Pearson wrote:
So the real question is: are there any AMD notebooks on the market with similar build quality to the old IBM Thinkpads? I've about had enough of Intel and their monopolistic ways.
I saw AMD-based HP laptops (Probook/Elitebook) and they are nice (if you don't mind a miniscule return key on the keyboard). The build quality is comparable to newer Thinkpads (sharp edges included). The docking options are a bit limited, though.
That said, I do _not_ know if HP is using anything similar to Boot Guard on those laptops. Judging from photos of an opened Elitebook 745 G2, there are two flash chips next to each other, so either it's some sort of Dual BIOS solution or possibly other parity checks or an EC accessing both flash chips. Before you spend 1000 USD on such a machine, it would be wise to make sure you are not being stopped by any AMD/HP equivalent of Boot Guard.
Regards, Carl-Daniel
On 02/07/2015 03:37 PM, Carl-Daniel Hailfinger wrote:
On 07.02.2015 21:14, Timothy Pearson wrote:
So the real question is: are there any AMD notebooks on the market with similar build quality to the old IBM Thinkpads? I've about had enough of Intel and their monopolistic ways.
I saw AMD-based HP laptops (Probook/Elitebook) and they are nice (if you don't mind a miniscule return key on the keyboard). The build quality is comparable to newer Thinkpads (sharp edges included). The docking options are a bit limited, though.
That said, I do _not_ know if HP is using anything similar to Boot Guard on those laptops. Judging from photos of an opened Elitebook 745 G2, there are two flash chips next to each other, so either it's some sort of Dual BIOS solution or possibly other parity checks or an EC accessing both flash chips. Before you spend 1000 USD on such a machine, it would be wise to make sure you are not being stopped by any AMD/HP equivalent of Boot Guard.
Regards, Carl-Daniel
We aren't looking at purchasing new laptops right now, but it's almost looking like the Chromebook might be one of the best options for a machine to run fully open-source software. Never used one so I don't know build quality or horsepower however.