Re: [coreboot] Server systems shipped with coreboot

I am not a lawyer, but have some understanding of the relevant liability
law.  This is not legal advice.

If damage is cause to the hardware that the ME would have prevented, very
likely.  Same goes for any security holes opened by removing the ME.  This
is not a supported option by Intel, so (practically*) they have no further
liability for anything that goes wrong on ME scrubbed systems.

* You would need to prove in an airtight manner that the same defect shows
up on fully updated ME-enabled systems.  Given the closed nature of the ME
this may be difficult in a legal environment short of reproducing a defect
across multiple ME-enabled identical systems.
> Hi all,
>
> Searching legal implications of reselling deblobbed hardware, and can't
> fight straight answers.
>
> If the bios is replaced, and ME is disabled with its modules erased, could
> the maker pursue the seller for having made those modifications?
>
> Thanks,
> Thierry
>
> Le mar. 23 janv. 2018 13:56, Timothy Pearson
>
> a écrit :
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > 4 cores, SMT4.  There's an 8-core available for $190 more, and AFAIK
> > there are plans to start offering an 18-core server chip very shortly.
> >
> > These are the OpenPOWER machines, so there is hardware virtualization
> > support (including I/O passthrough) that works well with kvm and QEMU.
> > I haven't really heard anything referred to as "LPAR" on these newer
> > POWER8/POWER9 machines outside of legacy documents.
> >
> > On 01/23/2018 12:47 PM, ron minnich wrote:
> > > how many cores is that? Does it come with LPAR?
> > >
> > > On Mon, Jan 22, 2018 at 9:48 PM [e-mail]
> >
> > > <[e-mail] > wrote:
> > > In case anyone wants to know the (non-coreboot) libre firmware
> >
> > TALOS
> > 2
> > > single CPU/board combo is now only 2.5K.
> > >
> > > I still can't figure out how they managed to make it so
> >
> > affordable,
> > this
> > > is seriously great.
> > >
> > > --
> > > coreboot mailing list: [e-mail]
> > > <mailto:[e-mail]>
> > > https://mail.coreboot.org/mailman/listinfo/coreboot
> >
> > Timothy Pearson
> > Raptor Engineering
> > [phone] (direct line)
> > [phone] (switchboard)
> > https://www.raptorengineering.com
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1
> >
> > iQEcBAEBAgAGBQJaZ4U2AAoJEK+E3vEXDOFbBUEIAKxL6cD2L27yZh63OhM0TD8h
> > BZD2r0nYF/NLfGi50KuMZPNzb2lpzgLHc06ZHZmJBU0sFUbTdI3WrYibDPtY4lva
> > 1uG3gedN2u+sUCzTKrLILOyrstlJ2lQ4+8jxyO8PncK9Zx3LtgbSlGVGq+pvxsXI
> > Ac8Yqm+de6Is8aaAHMMzaT9UNxcjXCAs/zZm3iWcPkA2B0CVVUoKnsFuhtGG1cGd
> > j4bukGJrojkUMEFxIG93qphcurdP2AjuvOaUdZVuoC0uxdVL2az77SgRUH8Vmxdd
> > SFhAzG7j4LsqGMwiZBkubBZpSMPj6kPyRQUIxwwAk/vRLpOxoPdaEbrI/9wyIaM=
> > =PFaf
> > -----END PGP SIGNATURE-----

Server systems shipped with coreboot

[Alberto Bursi]

Same "I am not a lawyer" disclaimer for what I'm going to say here.

I don't think the seller can be held liable for anything, as long as 
they clearly stated what they did to the hardware they are selling.

Of course they will have to be able to provide any warranty and support 
over the devices they sell because Intel or whoever actually made the 
server/board will not really support nor accept RMAs of stuff with 
Coreboot on it.

-Alberto

On 03/23/2018 06:55 PM, [e-mail] wrote:
> I am not a lawyer, but have some understanding of the relevant liability
> law.  This is not legal advice.
>
> If damage is cause to the hardware that the ME would have prevented, very
> likely.  Same goes for any security holes opened by removing the ME.  This
> is not a supported option by Intel, so (practically*) they have no further
> liability for anything that goes wrong on ME scrubbed systems.
> You would need to prove in an airtight manner that the same defect shows
>
> up on fully updated ME-enabled systems.  Given the closed nature of the ME
> this may be difficult in a legal environment short of reproducing a defect
> across multiple ME-enabled identical systems.
> > Hi all,
> >
> > Searching legal implications of reselling deblobbed hardware, and can't
> > fight straight answers.
> >
> > If the bios is replaced, and ME is disabled with its modules erased, could
> > the maker pursue the seller for having made those modifications?
> >
> > Thanks,
> > Thierry
> >
> > Le mar. 23 janv. 2018 13:56, Timothy Pearson
> >
> > a écrit :
> > > -----BEGIN PGP SIGNED MESSAGE-----
> > > Hash: SHA1
> > >
> > > 4 cores, SMT4.  There's an 8-core available for $190 more, and AFAIK
> > > there are plans to start offering an 18-core server chip very shortly.
> > >
> > > These are the OpenPOWER machines, so there is hardware virtualization
> > > support (including I/O passthrough) that works well with kvm and QEMU.
> > > I haven't really heard anything referred to as "LPAR" on these newer
> > > POWER8/POWER9 machines outside of legacy documents.
> > >
> > > On 01/23/2018 12:47 PM, ron minnich wrote:
> > > > how many cores is that? Does it come with LPAR?
> > > >
> > > > On Mon, Jan 22, 2018 at 9:48 PM [e-mail]
> > >
> > > > <[e-mail] > wrote:
> > > >  In case anyone wants to know the (non-coreboot) libre firmware
> > >
> > > TALOS
> > > 2
> > > >  single CPU/board combo is now only 2.5K.
> > > >
> > > >  I still can't figure out how they managed to make it so
> > >
> > > affordable,
> > > this
> > > >  is seriously great.
> > > >
> > > >  --
> > > >  coreboot mailing list: [e-mail]
> > > >  <mailto:[e-mail]>
> > > >  https://mail.coreboot.org/mailman/listinfo/coreboot
> > >
> > > Timothy Pearson
> > > Raptor Engineering
> > > [phone] (direct line)
> > > [phone] (switchboard)
> > > https://www.raptorengineering.com
> > > -----BEGIN PGP SIGNATURE-----
> > > Version: GnuPG v1
> > >
> > > iQEcBAEBAgAGBQJaZ4U2AAoJEK+E3vEXDOFbBUEIAKxL6cD2L27yZh63OhM0TD8h
> > > BZD2r0nYF/NLfGi50KuMZPNzb2lpzgLHc06ZHZmJBU0sFUbTdI3WrYibDPtY4lva
> > > 1uG3gedN2u+sUCzTKrLILOyrstlJ2lQ4+8jxyO8PncK9Zx3LtgbSlGVGq+pvxsXI
> > > Ac8Yqm+de6Is8aaAHMMzaT9UNxcjXCAs/zZm3iWcPkA2B0CVVUoKnsFuhtGG1cGd
> > > j4bukGJrojkUMEFxIG93qphcurdP2AjuvOaUdZVuoC0uxdVL2az77SgRUH8Vmxdd
> > > SFhAzG7j4LsqGMwiZBkubBZpSMPj6kPyRQUIxwwAk/vRLpOxoPdaEbrI/9wyIaM=
> > > =PFaf
> > > -----END PGP SIGNATURE-----

Server systems shipped with coreboot

[Thierry Laurion]

Hi all,

Le ven. 23 mars 2018 13:56,  a écrit :
> I am not a lawyer, but have some understanding of the relevant liability
> law.  This is not legal advice.
>
> If damage is cause to the hardware that the ME would have prevented, very
> likely.

Damage orevrntrd by ME?

Same goes for any security holes opened by removing the ME.

Like deactivating fTPM Boeing considered as opening security holes? I don't
understand the suppositions made here.
> This
> is not a supported option by Intel, so (practically*) they have no further
> liability for anything that goes wrong on ME scrubbed systems.
> You would need to prove in an airtight manner that the same defect shows
>
> up on fully updated ME-enabled systems.  Given the closed nature of the ME
> this may be difficult in a legal environment short of reproducing a defect
> across multiple ME-enabled identical systems.
> > Hi all,
> >
> > Searching legal implications of reselling deblobbed hardware, and can't
> > fight straight answers.
> >
> > If the bios is replaced, and ME is disabled with its modules erased,
>
> could
> > the maker pursue the seller for having made those modifications?
> >
> > Thanks,
> > Thierry
> >
> > Le mar. 23 janv. 2018 13:56, Timothy Pearson
> >
> > a écrit :
> > > -----BEGIN PGP SIGNED MESSAGE-----
> > > Hash: SHA1
> > >
> > > 4 cores, SMT4.  There's an 8-core available for $190 more, and AFAIK
> > > there are plans to start offering an 18-core server chip very shortly.
> > >
> > > These are the OpenPOWER machines, so there is hardware virtualization
> > > support (including I/O passthrough) that works well with kvm and QEMU.
> > > I haven't really heard anything referred to as "LPAR" on these newer
> > > POWER8/POWER9 machines outside of legacy documents.
> > >
> > > On 01/23/2018 12:47 PM, ron minnich wrote:
> > > > how many cores is that? Does it come with LPAR?
> > > >
> > > > On Mon, Jan 22, 2018 at 9:48 PM [e-mail]
> > >
> > > > <[e-mail] > wrote:
> > > > In case anyone wants to know the (non-coreboot) libre firmware
> > >
> > > TALOS
> > > 2
> > > > single CPU/board combo is now only 2.5K.
> > > >
> > > > I still can't figure out how they managed to make it so
> > >
> > > affordable,
> > > this
> > > > is seriously great.
> > > >
> > > > --
> > > > coreboot mailing list: [e-mail]
> > > > <mailto:[e-mail]>
> > > > https://mail.coreboot.org/mailman/listinfo/coreboot
> > >
> > > Timothy Pearson
> > > Raptor Engineering
> > > [phone] (direct line)
> > > [phone] (switchboard)
> > > https://www.raptorengineering.com
> > > -----BEGIN PGP SIGNATURE-----
> > > Version: GnuPG v1
> > >
> > > iQEcBAEBAgAGBQJaZ4U2AAoJEK+E3vEXDOFbBUEIAKxL6cD2L27yZh63OhM0TD8h
> > > BZD2r0nYF/NLfGi50KuMZPNzb2lpzgLHc06ZHZmJBU0sFUbTdI3WrYibDPtY4lva
> > > 1uG3gedN2u+sUCzTKrLILOyrstlJ2lQ4+8jxyO8PncK9Zx3LtgbSlGVGq+pvxsXI
> > > Ac8Yqm+de6Is8aaAHMMzaT9UNxcjXCAs/zZm3iWcPkA2B0CVVUoKnsFuhtGG1cGd
> > > j4bukGJrojkUMEFxIG93qphcurdP2AjuvOaUdZVuoC0uxdVL2az77SgRUH8Vmxdd
> > > SFhAzG7j4LsqGMwiZBkubBZpSMPj6kPyRQUIxwwAk/vRLpOxoPdaEbrI/9wyIaM=
> > > =PFaf
> > > -----END PGP SIGNATURE-----