Compromising Between Intel Without Coreboot or AMD PSP

[adrelanos]

@de_dust2

There are some out there who have successfully run their own code on the processor of the Intel ME.

• https://kakaroto.ca/2019/11/exploiting-intels-management-engine-part-1-understanding-pts-txe-poc/
• Exploiting Intel’s Management Engine – Part 2: Enabling Red JTAG Unlock on Intel ME 11.x (INTEL-SA-00086) | KaKaRoTo's Blog

@FranklyFlawless

@de_dust2

What Purism does is enforce the known-neutered Intel ME with the hardware chip on the Librem 14.

Citation needed.

Dunno what was meant. This is what I found: Neutralizing the Intel Management Engine on Librem Laptops – Purism Maybe it’s that?

@Vael_S

I normally overwrite the IME with a custom operating system that I trust if I have the availability to enable the write mode on the IME. Same with AMD’s version.

In theory or practice? You overwrite Intel ME with a custom operating system?

Same for AMD PSP?

There is currently no public evidence or documentation to suggest that people have successfully replaced the AMD Platform Security Processor (PSP) firmware with custom operating systems.

That would be a gigantic achievement nobody else has accomplished.

@Vael_S

BIOS updates… Write your own BIOS to flash to it, fixing all the issues.

@Vael_S

IME Updates… Download Minix, add your IME code, flash.

In theory or practice? Did you rewrite the BUP module?