Architecture 4031: Introductory coreboot

Praktischer Leitfaden: Intel Management Engine einschränken, Firmware mit fwupd prüfen, offene Firmware wie coreboot und Heads nutzen und Hardware physisch abschalten – ohne teures Spezialgerät.

the worst part is that UEFI **could** have been better coreboot shows that good design from the start allows for significantly better performance AND security while offering far more advanced capabillity with a codebase a fraction of the size. but...

It is our pleasure to announce that the Star Labs StarFighter is officially certified for Qubes OS Release 4! ## The Star Labs StarFighter The Star Labs StarFighter is a 16-inch laptop featuring open-source coreboot firmware, disabled Intel ME, up to 64 GB of memory, wireless kill switch, removable webcam, as well as extensive firmware controls for fan, power, security, boot behavior, and more. ## Qubes-certified options The configuration options required for Qubes certification are detailed below. ### Base Configuration * Certified: Standard (Intel Core Ultra 5 125H + 32GB LPDDR5X + QHD display) * Certified: Ultra (Intel Core Ultra 9 285H + 64GB LPDDR5X + 4K display) * The AMD configuration is not certified. * **Warning:** While both the QHD and 4K display variants will work, the 4K display will run at a lower resolution (Full HD) due to the absence of proper support for HiDPI in Qubes OS. While users can manually change the resolution to 4K, we cannot guarantee everything will work properly. For example, there are known issues with both UI scaling and full-screen video playback performance in 4K. This limitation may be lifted in a future Qubes OS release. ### Operating System * Certified: Qubes OS 4.3.2 or newer (within Release 4). * Releases older than 4.3.2 are not certified. * You may choose either to have Star Labs preinstall Qubes OS for you, or you may choose to install Qubes OS yourself. This choice does not affect certification. ### Storage & Additional Storage * Certified: All of the available options in these sections ## Disclaimers * As mentioned above, while both the QHD and 4K display variants will work, the 4K display will run at a lower resolution (Full HD) due to the absence of proper support for HiDPI in Qubes OS. While users can manually change the resolution to 4K, we cannot guarantee everything will work properly. For example, there are known issues with both UI scaling and full-screen video playback performance in 4K. This limitation may be lifted in a future Qubes OS release. ## What is Qubes-certified hardware? Qubes-certified hardware is hardware that has been certified by the Qubes developers as compatible with a specific major release of Qubes OS. All Qubes-certified devices are available for purchase with Qubes OS preinstalled. Beginning with Qubes 4.0, in order to achieve certification, the hardware must satisfy a rigorous set of requirements, and the vendor must commit to offering customers the very same configuration (same motherboard, same screen, same BIOS version, same Wi-Fi module, etc.) for at least one year. Qubes-certified computers are specific models that are regularly tested by the Qubes developers to ensure compatibility with all of Qubes’ features. The developers test all new major versions and updates to ensure that no regressions are introduced. It is important to note, however, that Qubes hardware certification certifies only that a particular hardware _configuration_ is _supported_ by Qubes. The Qubes OS Project takes no responsibility for any vendor’s manufacturing, shipping, payment, or other practices, nor can we control whether physical hardware is modified (whether maliciously or otherwise) _en route_ to the user.

It is our pleasure to announce that the Star Labs StarBook Horizon is officially certified for Qubes OS Release 4! ## The Star Labs StarBook Horizon The Star Labs StarBook Horizon is a 13.4-inch laptop featuring open-source coreboot firmware, up to 32 GB of memory, Wi-Fi kill switch, integrated webcam cover, as well as extensive firmware controls for fan, power, security, boot behavior, and more. ## Qubes-certified options The configuration options required for Qubes certification are detailed below. ### Base Configuration * Certified: Standard (Intel Core i3-N305) * The Plus configuration (Intel Core i5-1334U) has not yet been certified. As of this writing, we have not yet received the unit for testing, but we currently do not anticipate any significant barriers to eventual certification. ### Storage * Certified: All of the available options in these sections ### Operating System * Certified: Qubes OS 4.3.1 or newer (within Release 4). * Releases older than 4.3.1 are not certified. * You may choose either to have Star Labs preinstall Qubes OS for you, or you may choose to install Qubes OS yourself. This choice does not affect certification. ## Disclaimers * As mentioned above, the “Plus” base configuration (Intel Core i5-1334U) has not yet been certified. As of this writing, we have not yet received the unit for testing, but we currently do not anticipate any significant barriers to eventual certification. ## What is Qubes-certified hardware? Qubes-certified hardware is hardware that has been certified by the Qubes developers as compatible with a specific major release of Qubes OS. All Qubes-certified devices are available for purchase with Qubes OS preinstalled. Beginning with Qubes 4.0, in order to achieve certification, the hardware must satisfy a rigorous set of requirements, and the vendor must commit to offering customers the very same configuration (same motherboard, same screen, same BIOS version, same Wi-Fi module, etc.) for at least one year. Qubes-certified computers are specific models that are regularly tested by the Qubes developers to ensure compatibility with all of Qubes’ features. The developers test all new major versions and updates to ensure that no regressions are introduced. It is important to note, however, that Qubes hardware certification certifies only that a particular hardware _configuration_ is _supported_ by Qubes. The Qubes OS Project takes no responsibility for any vendor’s manufacturing, shipping, payment, or other practices, nor can we control whether physical hardware is modified (whether maliciously or otherwise) _en route_ to the user.

Is this still an issue when you use a nitrokey to verify the hardware like how they currently do it? Also is the age of the hardware nitropad sells a security issue given they’re running coreboot instead of some outdated crappy OEM firmware? I can’t afford one of the newer ones I’m looking for a secure against evil maid attacks laptop and I’m currently between a macbook neo and a nitropad

Is this still an issue when you use a nitrokey to verify the hardware like how they currently do it? Also is the age of the hardware a security issue given they’re running coreboot instead of some outdated crappy OEM firmware? I’m looking for a secure against evil maid attacks laptop and I’m currently between a macbook neo and a nitropad

3mdeb firmware engineers have been quite busy this year working on porting Coreboot and openSIL to an AMD Ryzen AM5 MSI motherboard and similarly getting openSIL and Coreboot up and running on a…

3mdeb firmware engineers have been quite busy this year working on porting Coreboot and openSIL to an AMD Ryzen AM5 MSI motherboard and similarly getting openSIL and Coreboot up and running on a Gigabyte server motherboard for AMD EPYC 9005 CPUs. They haven't forgotten about their past projects though and today released an updated version of their Dasharo downstream firmware for the ASRock Rack SPC741D8-2L2T motherboard supporting 4th and 5th Gen Xeon Scalable processors...

3mdeb firmware engineers have been quite busy this year working on porting Coreboot and openSIL to an AMD Ryzen AM5 MSI motherboard and similarly getting openSIL and Coreboot up and running on a Gigabyte server motherboard for AMD EPYC 9005 CPUs. They haven't forgotten about their past projects though and today released an updated version of their Dasharo downstream firmware for the ASRock Rack SPC741D8-2L2T motherboard supporting 4th and 5th Gen Xeon Scalable processors...

3mdeb firmware engineers have been quite busy this year working on porting Coreboot and openSIL to an AMD Ryzen AM5 MSI motherboard and similarly getting openSIL and Coreboot up and running on a Gigabyte server motherboard for AMD EPYC 9005 CPUs. They haven't forgotten about their past projects though and today released an updated version of their Dasharo downstream firmware for the ASRock Rack SPC741D8-2L2T motherboard supporting 4th and 5th Gen Xeon Scalable processors...

3mdeb firmware engineers have been quite busy this year working on porting Coreboot and openSIL to an AMD Ryzen AM5 MSI motherboard and similarly getting openSIL and Coreboot up and running on a Gigabyte server motherboard for AMD EPYC 9005 CPUs

In the relentless march toward open hardware sovereignty, the work of 3mdeb serves as a quiet but vital reminder that progress is rarely a straight line.

(post deleted by author)

What machine would you set up for it, and also did you look at it from a no Intel ME perspective?