/hrt/ - Hardware Removal of botnets Thread

>Libreboot 22020710 edition

>"But what's the Intel ME, user?"
I'm glad you asked! The Intel ME, or Management Engine, is a secondary co-processor in every single Intel chip in the last decade.
It runs a MINIX-based operating system and has full networking capabilities, drivers, and a goddamn web server in it.
networkworld.com/article/3236064/servers/minix-the-most-popular-os-in-the-world-thanks-to-intel.html
This page offers additional information, and explains that it can read your files and applications, act as a keylogger, capture the screen, inject rootkits, etc.
libreboot.org/faq.html#intelme
Very nasty stuff, and no, the HAP bit thing isn't a full fix
firmwaresecurity.com/2017/12/06/bheu-slides-on-intel-me-vuln-uploaded/


>"HAHA INTEL BTFO! SCREW YOU GOYS I GOT RYZEN!!"
AMD has its own botnet, called the PSP, or Platform Securiy Processor.
Here's what it is:
libreboot.org/faq.html#amd-platform-security-processor-psp
Here's Libreboot asking for it to be opened up in Ryzen:
libreboot.org/amd-libre.html
Here's Plebbit asking for it:
reddit.com/r/linux/comments/5xvn4i/update_corebootlibreboot_on_amd_has_ceo_level/
Here's Edward motherfucking Snowden asking for it:
mobile.twitter.com/Snowden/status/837367956229206016
And here's AMD telling everyone to go fuck themselves:
yro.slashdot.org/story/17/07/19/1459244/amd-has-no-plans-to-release-psp-code

>"b-but how can I avoid this? Im scared, user!"
That's the point of this thread. To highlight options that are out there that are relatively free of botnets.
This will include the typical Librebooted memepads and whatnot, but a big part of this is also exploring alternative architectures.

Attached: 1512829433612.jpg (1500x1000, 229.89K)

Other urls found in this thread:

libreboot.org/docs/hardware/#desktops-amd-intel-x86
libreboot.org/docs/hardware/#serversworkstations-amd-x86
libreboot.org/docs/hardware/#laptops-intel-x86
puri.sm/learn/freedom-roadmap/
crowdsupply.com/eoma68/micro-desktop
imx6rex.com/open-rex/
coreboot.org/Chromebooks
docs.google.com/presentation/d/1eGPMu03vCxIO0a3oNX8Hmij_Qwwz6R6ViFC_1HlHOYQ/edit#slide=id.p
cavium.com/Table.html
shop.kobol.io/
en.wikipedia.org/wiki/Free_and_open-source_graphics_device_driver#ARM
lwn.net/Articles/738225/
github.com/altreact/archbk/issues/3
raptorcs.com/TALOSII/
nxp.com/products/microcontrollers-and-processors/power-architecture-processors
powerpc-notebook.org/faq/
embeddedplanet.com/product/single-board-computers/
code.coreboot.org/p/openfirmware/source/tree/HEAD/
lemote.com/html/product/
embeddedplanet.com/single-board-computers/processor/cavium-oceteon-ii/
crowdsupply.com/gnubee/personal-cloud-1
crowdsupply.com/gnubee/personal-cloud-2
code.coreboot.org/p/openboot/source/tree/1/
en.wikipedia.org/wiki/SPARC#Implementations
sifive.com/products/freedom/
lowrisc.org/
librecmc.org/
gogs.librecmc.org/libreCMC/libreCMC/wiki/Supported Hardware
twitter.com/SFWRedditImages

For inclusion into this list, if the processor is made by Intel Corporation or Advanced Micro Devices, the device must be 100% free as in Libreboot.
Otherwise, a less-extreme stance is taken, and something like Coreboot or U-boot will suffice.

Findings so far
x86 (Supported Distros: Basically all):
For desktops, there's lots of C2Ds and atoms listed, but also some very nice opterons and apparently an iMac
libreboot.org/docs/hardware/#desktops-amd-intel-x86
libreboot.org/docs/hardware/#serversworkstations-amd-x86
For Laptops, you have the CD and C2D memepads
libreboot.org/docs/hardware/#laptops-intel-x86
Purism doesn't do libreboot, but their roadmap includes this as a future goal.
puri.sm/learn/freedom-roadmap/
The last AMD chip that came without the PSP is Piledriver.
VIA also makes x86 processors. Proprietary BIOS, but maybe Coreboot potential?
Even then, still somewhat gimped.

ARM (Supported Distros: Most)
Obviously there's a shit ton of SBCs
One of these is EOMA68, which features 3D-printable housings, and potential RYF cert.
crowdsupply.com/eoma68/micro-desktop
iMX6 Rex is an education-based SBC that combines elements of a Pi and an Arduino. It uses U-Boot.
imx6rex.com/open-rex/
For a laptop option with an open firmware, try ARM Chromebooks.
I'm dead serious. From what I can tell you can remove the write protection, reflash coreboot with different payload (Not seaBIOS or Depthcharge), and install loonix of choice.
coreboot.org/Chromebooks
docs.google.com/presentation/d/1eGPMu03vCxIO0a3oNX8Hmij_Qwwz6R6ViFC_1HlHOYQ/edit#slide=id.p
Cavium makes some god-tier processors. Be on the lookout for that.
cavium.com/Table.html
Helios4 is an open-hardware NAS with U-boot
shop.kobol.io/
Be warned though, user space is still shit under ARM for a "usual" user experience.

In general, your biggest concern with ARM is the GPU drivers.
Mali is fucked. PowerVR too. Vivante GC and Qualcomm Ardreno are fine. Broadcom VideoCore is partial.
Finally Panfrost should be usable (Mali T760, C201 Chromebook).
en.wikipedia.org/wiki/Free_and_open-source_graphics_device_driver#ARM
MALI MIGHT BE GETTING OPENED UP PRAISE LINUX TORVALDS TECH TIPS
lwn.net/Articles/738225/
Some anons have reported that lighter environments like XFCE are usable on stuff like Mali without the driver, but it's not ideal.
One user said he couldn't remove the ChromeOS on his libreboot C201. This github issue talks about a solution.
github.com/altreact/archbk/issues/3

OpenPOWER (Supported Distros: Fedora, Debian, CentOS/RHEL, OpenSUSE, Ubuntu, BSDs):
Raptor Engineering sells POWER9 workstations, that may soon be getting RYF certification.
They're expensive as fuck, but probably the most powerful non-botnet computers that exist. Comparable to Xeons/Epyc.
raptorcs.com/TALOSII/

PowerPC (Supported Distros: Gentoo, Free/Open/NetBSD)
The company that still makes this is NXP
nxp.com/products/microcontrollers-and-processors/power-architecture-processors
Here is a project for a Libre PowerPC laptop using NXP, shooting for RYF certification.
powerpc-notebook.org/faq/
EmbeddedPlanet has several PowerPC SBCs, most using NXP.
embeddedplanet.com/product/single-board-computers/
If you have old PowerPC Apple products, they use OpenFirmware, which is here
code.coreboot.org/p/openfirmware/source/tree/HEAD/
Recommended models if you want to buy one: late PowerBook G4, PowerMac G5

MIPS (Supported Distros: Debian, Gentoo, NetBSD):
The /csg/ of desktops: Lemote is a chink company that sells libre MIPS boards, using PMON firmware.
lemote.com/html/product/
EmbeddedPlanet also has MIPS boards with processors from Cavium with U-boot firmware.
embeddedplanet.com/single-board-computers/processor/cavium-oceteon-ii/
GnuBee has two low power NAS devices. They're cheap, they use MIPS, and they're going for RYF!
crowdsupply.com/gnubee/personal-cloud-1
crowdsupply.com/gnubee/personal-cloud-2

SPARC (Supported Distros: *BSD, Gentoo, Illumos):
Legit server stuff here. Open ISA and Open Boot firmware.
code.coreboot.org/p/openboot/source/tree/1/
Below link is a big list of options, from ancient 80s shit, to modern servers released this year with 5.0GHz and 32 cores
And of course, everything in between
en.wikipedia.org/wiki/SPARC#Implementations

RISC-V (Supported Distros: FreeBSD):
Only SBCs here. SiFive has some.
sifive.com/products/freedom/
There's also LowRISC
lowrisc.org/

For Routers, check out LibreCMC and its supported list.
librecmc.org/
gogs.librecmc.org/libreCMC/libreCMC/wiki/Supported Hardware

Bump

Any cheap laptop?

If it's Hardware Removal of Botnets, shouldn't it be HRB?

Hard Removal of botnets Thread

Pinebook Pro would be your cheapest option but the screen is terrible
ARM chromebooks are your best option
Those are becoming more "premium" but even the best one available now (Acer Chromebook Spin CP513-2H) is only around $600

HRT and hardware removal go hand in hand.

i dont wanna use any laptops
i wanna keep using my desktop rig and not compromise the performance of any components, but at the same time not sending any private information to the alphabet guys
i work with cads, 3d renders and gaming
is it possible to use something like a risc v cpu and an alt gpu architecture and still perform like if i was using an nvidia rtx and a ryzen cpu?

Attached: index.jpg (218x231, 11.51K)

all these trouble
yet you're here, online, at Any Forums

I own every single machine listed in the OP. AMA

Attached: 1633436249188.jpg (960x717, 75.45K)

Intel is making a Risc-V core that is supposed to come out 2022; google Intel Horse Creek. This is the beginning of the Risc-V revolution.

What do you use the most?

Talos and one ARM board are used for production services. So they're "used" 24/7. Others are on an as-needed basis depending on what packages needs testing. Working on the SPARC right now.

Attached: 1642097040457.jpg (1024x737, 99.37K)

one day a cheap sbc that can be daily driven that is completely libre will appear
that day i'll buy into this meme

Soon hopefully.
Yet I don't have high hopes hung on that if I'm honest.

Based EHX enjoyer.

>trusting Intlel
It's gonna have proprietary extensions to the ISA at the very least, if not outright backdoors like the ME...etc

>Talos
You're either rich, lucky or both.
I assume you're running Gentoo on these systems?

Yes. I did get a good deal on the Talos - half price on the board because ONE of the RAM slots was broken. Out of 16 slots. Even with that, about $6k USD for the entire system. It's an absolute beast though.

Attached: 1648812617521.jpg (736x1140, 291.25K)

That's a crazy deal.
Any specific workloads on such a beast of a system? Or just a generic server?

No, nothing you couldn't do with an equivalent Xeon. But it can run containers, it can virtualize with hardware accel, etc etc. I just use it as a firewall/router and application server. And also build box for cross-compiling.

Attached: 1644078707786.jpg (480x401, 41.11K)

>installed libreboot so im spyware free
>proceeds to post on cloudflared site that needs javascript

Attached: 1657602511170.png (213x237, 18.25K)