Coreboot...

Talk here about security in general. Posting illegals software is prohibited. All stuffs in this forum must be considered as for "Educational purpose only".
fullmoonremix

Coreboot...

Post#1 by fullmoonremix » 04 May 2016, 05:52

Salutations... :)

Firmware bugs??? :unknown: well...
Scarface (1983 film): Legacy
" ...say hello to my little friend "
And say "goodbye" to infestation... :evil: with Coreboot which is " Secure by design ".

Chromebook and Chromebox has Coreboot so I purchased one today... :oops:
http://www.ebay.com/itm/121879879581?_t ... EBIDX%3AIT
http://www.ebay.com/itm/HP-Chromebox-De ... SwWTRWvge9

mITX... nITX and pITX (x86) has Coreboot too... :wink:
http://webwarper.net/ww/~av/store.netga ... p=66325730
http://webwarper.net/ww/~av/store.netga ... board.aspx
http://webwarper.net/ww/~av/store.netga ... board.aspx
http://webwarper.net/ww/~av/store.netga ... urbot.aspx

"Best Regards"... :beer:

Posted by 73.150.85.78 via http://webwarper.net
This is added while posting a message to avoid misusing the service
Last edited by fullmoonremix on 07 May 2016, 23:18, edited 40 times in total.

fullmoonremix

Coreboot (...firmware bug spray)

Post#2 by fullmoonremix » 04 May 2016, 12:52

Salutations... :)

Here's a detailed hardware list and ftp...
https://www.coreboot.org/Supported_Motherboards
https://www.coreboot.org/releases/

"Best Regards"... :beer:

KnallKopf
Samurai
Samurai
Posts: 134
Joined: 18 Sep 2012, 20:56
Distribution: Porteus 64bit KDE4
Location: Absurdistan

Re: Coreboot...

Post#3 by KnallKopf » 14 May 2016, 22:42

Hmm a poor list with old Mainboards and a lot of unfixed problems.

Exist any new desktop Mainboards where cooreboot run out of the box ?

My Problem is my PC is died after 8 years. :cry:
And i would like a new one.
But it is for me a expensiv investment.
And I do not need to brick my new PC after trying to flash coreboot on it.

fullmoonremix

Re: Coreboot...

Post#4 by fullmoonremix » 15 May 2016, 00:37

Unfotunately... Coreboot has been under supported outside of the Intel/Atom chipset :unknown:

However...
mITX... nITX and pITX (x86) has Coreboot too... :wink:
http://webwarper.net/ww/~av/store.netga ... p=66325730
http://webwarper.net/ww/~av/store.netga ... board.aspx
http://webwarper.net/ww/~av/store.netga ... board.aspx
http://webwarper.net/ww/~av/store.netga ... urbot.aspx

There are 2 x86 flavors... $$$ dual core or $$$$$$$$$$$$$$$$$$$$$$ octacore. :wall:

Booting either mobo from a Kanguru "Secure Trust" USB... Porteus has more than plently of resources
on the former and the latter is a console killing beast if used w/ a high end GPU (nVidia 970 GTX?) card.

Posted by 73.150.85.78 via http://webwarper.net
This is added while posting a message to avoid misusing the service
Last edited by fullmoonremix on 10 Jun 2016, 13:45, edited 1 time in total.

KnallKopf
Samurai
Samurai
Posts: 134
Joined: 18 Sep 2012, 20:56
Distribution: Porteus 64bit KDE4
Location: Absurdistan

Re: Coreboot...

Post#5 by KnallKopf » 16 May 2016, 02:02

cool Router but i search more a classical Desktop PC.
this one looks like more interesting: https://forum.porteus.org/viewtopic.php?f=61&t=5857
Thanks

Evan
Warlord
Warlord
Posts: 519
Joined: 11 Apr 2016, 09:00
Distribution: Anything Cinnamon
Location: London

Re: Coreboot...

Post#6 by Evan » 08 Jun 2016, 22:50

<removed>
Last edited by Evan on 24 Jun 2016, 12:12, edited 1 time in total.

User avatar
Ed_P
Contributor
Contributor
Posts: 3316
Joined: 06 Feb 2013, 22:12
Distribution: Cinnamon 3.2.2 64-bit ISO
Location: Western NY, USA

Re: Coreboot...

Post#7 by Ed_P » 08 Jun 2016, 23:19

Evan wrote:I personally wouldn't trust open source firmware Any more than you can trust open source software
You do realize that Porteus is based on Linux and Linux is all open source?
Ed

Evan
Warlord
Warlord
Posts: 519
Joined: 11 Apr 2016, 09:00
Distribution: Anything Cinnamon
Location: London

Re: Coreboot...

Post#8 by Evan » 08 Jun 2016, 23:25

<removed>
Last edited by Evan on 24 Jun 2016, 12:11, edited 1 time in total.

fullmoonremix

Re: Coreboot...

Post#9 by fullmoonremix » 09 Jun 2016, 00:27

Salutations... :good:
I personally wouldn't trust open source firmware
Evan... nothing in life can be trusted except death.
As I said before there is NO magic bullet ONLY peer review.

Coreboot (which is little known because it's NOT sexy) is based on the concept of signed firmware. So it's NOT simply
open vs closed source. It's signed vs unsigned firmware. Signed firmware is authenticated. Unsigned is NOT.

So what does this mean? Well... unsigned means your firmware can be
hijacked by the bad guys because it doesn't require authentication.

In simple terms... I will trust a developer (like brokenman) before I trust a blackhat. This is what
makes the community so special... there are TOO many eyeballs therefore fewer trouble makers.

As brokenman correctly pointed out in another thread Porteus is a "signed" distro. Which makes it trustworthy.
The same can be said of the " Coreboot " community (this includes Google) which is notably larger than our project.

Not for nothing... I'm not challenging you... I'm just trying to offer a broader context.

"Best Regards"... :beer:

Posted by 73.150.85.78 via http://webwarper.net
This is added while posting a message to avoid misusing the service
Last edited by fullmoonremix on 14 Jun 2016, 10:26, edited 9 times in total.

Evan
Warlord
Warlord
Posts: 519
Joined: 11 Apr 2016, 09:00
Distribution: Anything Cinnamon
Location: London

Re: Coreboot...

Post#10 by Evan » 09 Jun 2016, 01:05

<removed>
Last edited by Evan on 24 Jun 2016, 12:11, edited 1 time in total.

fullmoonremix

Re: Coreboot...

Post#11 by fullmoonremix » 09 Jun 2016, 01:22

Salutations... :good:

I do NOT tell anyone what to do... only what to consider (I'm agnostic so it's always... "Six of one, half dozen of the other" and to each his own) :unknown:
Not for nothing... I'm not challenging you... I'm just trying to offer a broader context.
Take a close look @ the signature @ the bottom of my posts. I preface... because I practice what I preach.
So whether I use part or all of your sentence the context does NOT change. Which is... trust is moot and peer review is not.

Intel... (closed source) the same people who brought us Micro$oft (closed source) made this "creation" @ Micro$oft's (who will
always be hostile to Linux based on the principals established by Richard Stallman) bidding who they've been in bed with for decades.

Further... @ boot time the only exploits are firmware based (so @ that time there
is NO crap) so memory exploits (eg. priviledge escalation) are moot until the OS...
loads (when system control is handed over to the OS) then it poses a threat (which
is why I've been arguing for hardening Porteus kernel or "any" OS for that matter).

This is why I use " Coreboot " and Kanguru signed USB flash and fixed disk devices.

In regard to openSSL many of their coders come from the commercial closed source community that supports the project.
IMHO... openSSL should be thrown under the bus (deprecated) in favor of LibreSSL (a far superior project).

"Best Regards"... :beer:

Posted by 73.150.85.78 via http://webwarper.net
This is added while posting a message to avoid misusing the service
Last edited by fullmoonremix on 14 Jun 2016, 10:28, edited 8 times in total.

User avatar
Ed_P
Contributor
Contributor
Posts: 3316
Joined: 06 Feb 2013, 22:12
Distribution: Cinnamon 3.2.2 64-bit ISO
Location: Western NY, USA

Re: Coreboot...

Post#12 by Ed_P » 09 Jun 2016, 04:16

Evan wrote:
Ed_P wrote:
Evan wrote:I personally wouldn't trust open source firmware Any more than you can trust open source software
You do realize that Porteus is based on Linux and Linux is all open source?
Not sure what you have read from my post or why you thought that i didn't think that linux is not open source software when the reference above in bold is inclusive of all open source software , or what porteus has to do with anything ? <headscratch> :)
To answer your question, "what porteus has to do with anything", you are posting in a Porteus forum. You are using a Porteus OS. Porteus is based on Linux which is open source. Thus stating you don't trust open source software seems kinda odd in that you are using it and supporting it in the Porteus forum.

That's all.
Ed

Evan
Warlord
Warlord
Posts: 519
Joined: 11 Apr 2016, 09:00
Distribution: Anything Cinnamon
Location: London

Re: Coreboot...

Post#13 by Evan » 09 Jun 2016, 05:13

<removed>
Last edited by Evan on 24 Jun 2016, 12:11, edited 1 time in total.

User avatar
Ed_P
Contributor
Contributor
Posts: 3316
Joined: 06 Feb 2013, 22:12
Distribution: Cinnamon 3.2.2 64-bit ISO
Location: Western NY, USA

Re: Coreboot...

Post#14 by Ed_P » 09 Jun 2016, 05:55

Evan wrote: This has gone from the sublime to the ridiculous that i'm struggling to reason and discuss respectfully without it looking like i'm trying to bicker and bump heads for the sake of it.
Actually it does kinda look that way.
Evan wrote:At no point did i say i distrust all open source , i just don't see any reason to trust coreboot any more so than normal.
Actually it reads like you did.
Evan wrote:I personally wouldn't trust open source firmware Any more than you can trust open source software
Ed

Evan
Warlord
Warlord
Posts: 519
Joined: 11 Apr 2016, 09:00
Distribution: Anything Cinnamon
Location: London

Re: Coreboot...

Post#15 by Evan » 09 Jun 2016, 06:05

<removed>
Last edited by Evan on 24 Jun 2016, 12:11, edited 2 times in total.

Post Reply