[coreboot] Where to get ME image/flash descriptors for the x220?

Zaolin zaolin at das-labor.org
Mon Mar 13 21:22:08 CET 2017


Have fun 
https://github.com/zaolin/coreboot-thinkpad-doc/tree/x220/firmware/splited


On 03/13/2017 09:11 PM, Taiidan at gmx.com wrote:
> On 03/08/2017 01:29 PM, Igor Skochinsky wrote:
>
>> Hello Taiidan,
>>
>> Alas, the 8duj28us.exe update and a few others I checked do not seem 
>> to contain the ME region or the descriptor. There is 8duj28us.exe 
>> with the ME update but it requires an already running ME to be 
>> applied. You could in theory extract the partitions from it and 
>> assemble into a valid ME region by constructing an FPT but that's not 
>> trivial. I would suggest you to just take the descriptor and ME 
>> region from "random people on the internet". The descriptor does not 
>> contain any code and the ME firmware is signed by Intel so it can't 
>> be backdoored by randos (there are much easier ways to hack people 
>> than stealing keys from Intel).
> Damn :[
> There is also the .iso bios update with the .FL2 and FL1 files what 
> about that?
>
> I had heard rumors from a couple people that there are ME signing keys 
> floating around in the darknet on some elite hacker forums so I was 
> paranoid as I don't want to have my machine used to hack something 
> important.
>




More information about the coreboot mailing list