skulls icon indicating copy to clipboard operation
skulls copied to clipboard

ifdmegbe gigabit ethernet blob? + including iPXE?

Open ami7az opened this issue 5 years ago • 4 comments

Does Skulls keep the gigabit ethernet blob of the bottom ROM (ifdmegbe)? Or is it being replaced or put dormant, with something entirely open source instead? In case of the latter, would it be possible to also include iPXE for free ethernet (not Wi-Fi!) connections as a payload, or would this lead to more attack surface? Thank you!

ami7az avatar Nov 13 '19 23:11 ami7az

our installation keeps your gbe blob (and ifd) untouched and only replaces the bios flash region.

merge avatar Nov 21 '19 12:11 merge

Thanks! It would be great if this could be replaced with something FOSS in the future, though.

Once the linux kernel boots, is it FOSS only then by the drivers, and inactive? Or is this blob always in charge?

(I'd like to have the least amount of blobs possible.)

ami7az avatar Dec 11 '19 13:12 ami7az

The GbE region is just data. If that scares you, maybe you should consider using something that truly respects your freedom.

Yes, unironically.

Th3Fanbus avatar May 29 '20 22:05 Th3Fanbus

Anyone who would like to generate their own gbe can with this bincfg set and spec. I strongly suggest modifying it and using your own MAC address. IBoot and PXE are disabled.

@Th3Fanbus That isn't necessarily true. When reading through the data sheet, I saw where the IBoot Advanced Power Management does interact with Management Engine (ME). I have no idea what the possibilities are or if there is the ability to exploit this, but there is more than just data in certain parts.

Thrilleratplay avatar Sep 07 '20 23:09 Thrilleratplay