[coreboot] Re: how intel ME is connected to the internet ?

2021-10-04 Thread Gregg Levine
Hello! Regarding the Intel ME, there's a good selection of articles on Hack A Day. For starters: https://hackaday.com/2017/12/11/what-you-need-to-know-about-the-intel-management-engine/ And then: https://hackaday.com/tag/management-engine/ There you'll find five separate ones covering much of

[coreboot] Re: how intel ME is connected to the internet ?

2021-10-04 Thread Sam Kuper
On Tue, Oct 05, 2021 at 03:17:13AM +0700, Hendra wrote: > [..] so, in conclusion: > >- ME has its own MAC and IP address No. NICs have MACs. NICs *may* have IP addresses. >- ME can access the internet by using the OS's configured network >connection, Or perhaps a network

[coreboot] Re: how intel ME is connected to the internet ?

2021-10-04 Thread Nico Huber
On 04.10.21 22:17, Hendra wrote: > hi Nico, > > "they" refers to the adversary. huh? that's the first time you bring that up, IIRC. Your original question, how it is connected to the internet, does not imply any malicious intention. If you assume that, all bets are off. I don't think the quotes

[coreboot] Re: Gigabyte D510UD MOBO

2021-10-04 Thread Paul Menzel
Dear Ilker, Am 04.10.21 um 22:28 schrieb Ilker C: I have this computer since 11 years and working with triple boot from SSD and HDD. Also I have PCI graphics card Radeon 512 KB. I overclocked the CPU to 2Ghz to run Linux Mint and Win 10. I had a problem with windows 10 due to the PCI

[coreboot] Gigabyte D510UD MOBO

2021-10-04 Thread Ilker C
Hello All, I have this computer since 11 years and working with triple boot from SSD and HDD. Also I have PCI graphics card Radeon 512 KB. I overclocked the CPU to 2Ghz to run Linux Mint and Win 10. I had a problem with windows 10 due to the PCI graphics card conflicting when installed ram is

[coreboot] Re: how intel ME is connected to the internet ?

2021-10-04 Thread Hendra
hi all, Thanks for the information. hi Brian, That's mind blowing, never think about that before. hi Shawn / Peter, Thanks for the pdf and link, I'm gonna find some time to read them. hi Nico, "they" refers to the adversary. so, in conclusion: - ME has its own MAC and IP address -

[coreboot] Re: There is a python in our toolchain?!?

2021-10-04 Thread Ricardo Quesada via coreboot
Hi all, Regarding Patrick's 2nd point (end-to-end testing), what's the recommend way to go forward? I just need to run one of the Coreboot's utils (in this case "elogtool"), and make sure the output is the expected one. Should I use Contest, as suggested by Ron Minnich? Thanks! On Thu, Sep

[coreboot] Re: Atomic Accesses to Local APIC

2021-10-04 Thread Julian Stecklina
The X86_GOOD_APIC was set in the past in a few configs. You can find them via: git log -S GOOD_APIC --source --all The define itself was finally removed in: commit fc57d6c4c2848726be1361f6dee3c33e7551b857 Author: Patrick Rudolph Date: Tue Nov 12 16:30:14 2019 +0100 cpu/x86/lapic:

[coreboot] Re: Atomic Accesses to Local APIC

2021-10-04 Thread ron minnich
I would be happy if all those old buggy systems were gone, good idea Peter! On Mon, Oct 4, 2021 at 9:39 AM Peter Stuge wrote: > > ron minnich wrote: > > The problem, at this point, is that a change this broad must also be > > tested across all platforms to make sure it's not breaking. > > While

[coreboot] Re: Atomic Accesses to Local APIC

2021-10-04 Thread Peter Stuge
ron minnich wrote: > The problem, at this point, is that a change this broad must also be > tested across all platforms to make sure it's not breaking. While true it could be worthwhile to check how often CONFIG_X86_GOOD_APIC is unset... > This looks like it was done for a hardware problem. We

[coreboot] Re: Atomic Accesses to Local APIC

2021-10-04 Thread ron minnich
The problem, at this point, is that a change this broad must also be tested across all platforms to make sure it's not breaking. This looks like it was done for a hardware problem. We had a lot of x86 implementations in tree at that time, and they had lots of bugs. On Mon, Oct 4, 2021 at 8:11 AM

[coreboot] Re: Atomic Accesses to Local APIC

2021-10-04 Thread Julian Stecklina
On Mon, 2021-10-04 at 07:32 -0700, ron minnich wrote: > that was pre-git but is there any useful comment in git anyway? I only > have the vaguest memory of why it went in. It was introduced in c84c1906b7 and fcd5ace00b3 without explanation. I particularly don't understand the lapic_write_around

[coreboot] Re: how intel ME is connected to the internet ?

2021-10-04 Thread Brian Milliron
> That raises questions including the following: > > - Does ME in fact extract network credentials from the main OS when > latter is running? (IIRC, Snowden indicated the answer is yes - at > least in some cases.) Technically it wouldn't need to since it controls the networking hardware

[coreboot] Re: PXE on Coreboot

2021-10-04 Thread ron minnich
use linuxboot, don't use UEFI payload. That's what we've done at Google, among other companies (ByteDance too). if you use linuxboot, then you get our pxeboot written in Go, and that can use http to pull the image down as well as tftp; http is literally (measured) 100x faster. I would avoid

[coreboot] Re: Atomic Accesses to Local APIC

2021-10-04 Thread ron minnich
that was pre-git but is there any useful comment in git anyway? I only have the vaguest memory of why it went in. On Mon, Oct 4, 2021 at 7:14 AM Julian Stecklina wrote: > > Hello, > > I was looking at the Local APIC code in coreboot and was wondering about > `lapic_write_atomic` in

[coreboot] Atomic Accesses to Local APIC

2021-10-04 Thread Julian Stecklina
Hello, I was looking at the Local APIC code in coreboot and was wondering about `lapic_write_atomic` in src/include/cpu/x86/lapic.h. This uses an atomic XCHG to write to Local APIC registers. I would like to understand why this would be necessary, because none of the OSes I've seen or worked on

[coreboot] PXE on Coreboot

2021-10-04 Thread Rao G
Hi Coreboot Developers, Very warm greetings! Trying to enable PXE along with UEFI payload on Elkhart Lake CRB platform Enabling Network stack requires below DXE drivers to be enabled https://github.com/tianocore/edk2/blob/vUDK2018/MdeModulePkg/MdeModulePkg.dsc