Thierry Laurion

49 Followers
150 Following
106 Posts

Here is a humble small v0.2.0 of intel_fw.

https://github.com/platform-system-interface/intel_fw/releases/tag/v0.2.0

It now has a command to extract ME directories, as previewed here:
https://mastodon.social/@CyReVolt/116826680367985669

This also adds a few more notes to the README for other people to chime in.

@jedie I guess this depends on the country. I can buy direct from Protectli Canada.

How is this related to smartphones ? Of course there are proprietary blobs in Wifi and other chips, not sure why this means more support needed. Can you elaborate ?

Protectli will also load #Coreboot for you on their routers, very useful too.

Porting the ThinkPad x61 to coreboot

An introduction to my IBM/Lenovo ThinkPad addiction Over 10 years ago I got my first ThinkPad x60. I got interested in free software by reading the about GNU …

Intel Core Ultra Series 3 is very efficient! No matter with proprietary UEFI firmware or experimental #coreboot port.

Here's a real life example of my latest #framework Laptop 13 Pro over an entire day.

https://mastodon.online/@JohnAZoidberg/116757958798444188

OpenAI faces investigation from state attorneys general | TechCrunch

It's not clear which states are involved, but they're asking about everything from OpenAI's ad policies to its handling of health data.

TechCrunch
Bay Trail, Intel's power efficient Atom x86 SoCs from 2013, ditched the previous ARCompact based management engine with the so-called TXE, with a *SPARC V8* core. Similar firmware, similar functionality, different ISA.
I wanted to gain access to one of these weird TXEs to dump its boot ROM, run my own code on it and study its peripherals and security model.
After many hours of trying to blindly exploit heap overflows in the firmware, I've found something infinitely better.
TXE has a limited amount of on-die SRAM, during boot it asks the host CPU to allocate some DRAM (so called UMA) for its working set, which gets isolated from the host CPU.
The isolation is *not* set by the TXE itself but the host MRC code, and as it turns out not setting it does not bother TXE at all, in fact it makes the TXE's working set visible to host in *plain text*.
13 year old hardware, but still this is one of the biggest wtf vulnerabilties I have ever seen, what a fail.

Important milestone for linuxboot/heads : simpledrm/simplefb/vesafb handoff after kexec call. Vérifies (optionnaly) ISO boot compatibility of USB boot and gives guidelines to users into how to report to their favorite Linux distro if incompatible.

Please test and report https://github.com/linuxboot/heads/pull/2130

#linuxboot #Heads #coreboot #ownership #kexec #handoff

ISO boot support with sysfb display handoff: kernel detection, kexec patches, test harness by tlaurion · Pull Request #2130 · linuxboot/heads

Summary Adds USB ISO boot with kernel-level display driver detection and a complete framebuffer handoff chain (coreboot → kexec → target kernel). kexec-tools patches 0001-build-fixes: cross-compi...

GitHub

This is so awesome to see!

#Lenovo #firmware engineers are looking into both @coreboot and #LinuxBoot, pointing out issues with the "black box" (their words) #UEFI ecosystem:
https://ossindia2026.sched.com/event/2KNFn/an-introduction-to-coreboot-and-linuxboot-building-modern-open-boot-stack-manish-baing-arun-mahendran-lenovo

Open Source Summit India 2026: An Introduction To Coreboot and LinuxBoo...

View more about this event at Open Source Summit India 2026

@tlaurion @QubesOS The Wyng v0.8.1 and v0.9alpha2 releases are being readied...

Please check out the 'fix08' and '09alpha' branches to try them out!

v0.8.1 has some bug fixes and enhanced data recovery in arch-check.

v0.9alpha has arch-copy, which efficiently copies/updates duplicate archives. It also allows passphrase changes. These are some of the most-requested new features, though there are more to come.

We did a few small things to polish https://linuxboot.org today.

That includes a link to our reestablished Matrix chat.

Come join the #LinuxBoot channel if you're interested! 🥳

Home

LinuxBoot is the concept of using a Linux kernel and initramfs as a bootloader. The linuxboot repository contains a build system implementing LinuxBoot primarily targeting servers and PCs, which started as NERF in January 2017 at Google. Why? Improves boot reliability by replacing lightly-tested firmware drivers with hardened Linux drivers. Improves boot time by removing unnecessary code. Typically makes boot 20 times faster. Allows customization of the initrd runtime to support site-specific needs (both device drivers as well as custom executables). Proven approach for almost 20 years in military, consumer electronics, and supercomputing systems – wherever reliability and performance are paramount. LinuxBoot Book 📖 The official documentation for LinuxBoot is the LinuxBoot Book, where you can find information on how LinuxBoot works, how to build the various flavours (e.g. coreboot/LinuxBoot or UEFI PEI/LinuxBoot), the u-root ramfs builder, etc.

LinuxBoot