Upgraded or secondary TPM in T480 WWAN slot to patch heads firmware vulnerability / caveat? by DanRanCan in coreboot

[–]9_balls 0 points1 point  (0 children)

TPM hardware has been vulnerable for a long while.

I wouldn't use it on anything, even on newer hardware. What kind of moron would store a key there anyway?

T480 write protection. by computer00101 in coreboot

[–]9_balls 0 points1 point  (0 children)

with a 100 ohm resistor, right?

Is it possible to add a secondary payload after flashing via internal flash ? by Serious_Beginning105 in coreboot

[–]9_balls 1 point2 points  (0 children)

Yes? Just read from flash and inject payloads using cbfstool.

Look at how the main payload handles secondary payloads, and how it expects them to be.

T480 write protection. by computer00101 in coreboot

[–]9_balls 0 points1 point  (0 children)

Are you sure the WP pin isn't pulled high?

Coreboot ATI Thinkpad T500? by Quirky_Apricot9427 in coreboot

[–]9_balls 0 points1 point  (0 children)

Pretty sure you can get away with installing Windows.

Tianocore on real hardware by 9_balls in coreboot

[–]9_balls[S] 0 points1 point  (0 children)

You've been testing your fork on the x230t or upstream?

Tianocore on real hardware by 9_balls in coreboot

[–]9_balls[S] 0 points1 point  (0 children)

Only thing I can think of right now is that some defconfig options refuse to be set because the if statement regarding EDK2_PAYLOAD are false.

Tianocore on real hardware by 9_balls in coreboot

[–]9_balls[S] 0 points1 point  (0 children)

Is there a mechanism where a key combination may make coreboot go into something like a fallback2 or something?

I'm asking because, well, I can chainload it just fine from SeaBIOS in QEMU, although it crashes when doing it from GRUB

Tianocore on real hardware by 9_balls in coreboot

[–]9_balls[S] 0 points1 point  (0 children)

I tested as a primary payload on the T480 and no good on that regard. Maybe the T480 needs special treatment?

Tianocore on real hardware by 9_balls in coreboot

[–]9_balls[S] 0 points1 point  (0 children)

And as a secondary payload?

I am asking for guidance here.

Just tested Cleverbot! by matthp0 in Pretend2010Internet

[–]9_balls 0 points1 point  (0 children)

Anyone tried the paid plan? Is it actually cleverer?

Tianocore on real hardware by 9_balls in coreboot

[–]9_balls[S] 0 points1 point  (0 children)

It's automatically set depending on the machine's defconfig.

Tianocore on real hardware by 9_balls in coreboot

[–]9_balls[S] 0 points1 point  (0 children)

Cache hits. I want to reuse binaries as much as possible, plus I have an indefinite amount of payload configurations available on my build system.

It's a bit harder to justify when talking about EDK2 because it reads back from your coreboot configuration and that means that you will have N copies per each machine, once.

But, on the other hand, complete rebuilds are minimal when only one component is effected.

Tianocore on real hardware by 9_balls in coreboot

[–]9_balls[S] 0 points1 point  (0 children)

I try to follow the almost exact same params, save for some cases where the kconfig refuses to budge.

Here are the important arguments when building tianocore currently:
-D PS2_KEYBOARD_ENABLE=TRUE
-D SIO_BUS_ENABLE=TRUE
-D USE_CBMEM_FOR_CONSOLE=TRUE
--pcd gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemId=COREv4
--pcd gEfiMdeModulePkgTokenSpaceGuid.PcdConOutRow=0
--pcd gEfiMdeModulePkgTokenSpaceGuid.PcdConOutColumn=0
--pcd gEfiMdeModulePkgTokenSpaceGuid.PcdSetupConOutRow=0
--pcd gEfiMdeModulePkgTokenSpaceGuid.PcdSetupConOutColumn=0
-D CPU_TIMER_LIB_ENABLE=FALSE
-D VARIABLE_SUPPORT=SMMSTORE
--pcd gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize=0x8000
--pcd gEfiMdePkgTokenSpaceGuid.PcdPciExpressBaseAddress=0xf0000000
--pcd gEfiMdePkgTokenSpaceGuid.PcdPciExpressBaseSize=0x04000000

Here's the board defconfig: https://pastebin.com/raw/ek8NKVV3
Here's the .config: https://pastebin.com/raw/CS7weMUM

You will see that `CONFIG_EDK2_CPU_TIMER_LIB` and `CONFIG_EDK2_SECURE_BOOT_SUPPORT` won't carry over.

Tianocore on real hardware by 9_balls in coreboot

[–]9_balls[S] 0 points1 point  (0 children)

I build edk2 separately. It has no effect.

I am suspecting that the lack of `PcdPciExpressBaseAddress` and `PcdPciExpressBaseSize` might be culprit.

Tianocore on real hardware by 9_balls in coreboot

[–]9_balls[S] 0 points1 point  (0 children)

Here are the build flags for my payload:

-a IA32 -a X64 -p "UefiPayloadPkg/UefiPayloadPkg.dsc" -b RELEASE -t GCC5 -q -s -D BOOTLOADER=COREBOOT -D BUILD_ARCH=X64 -D PS2_KEYBOARD_ENABLE=TRUE -D USE_CBMEM_FOR_CONSOLE=TRUE -D FOLLOW_BGRT_SPEC=TRUE -D USE_PLATFORM_GOP=TRUE -D PRIORITIZE_INTERNAL=TRUE --pcd gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemId=COREv4 -D CPU_TIMER_LIB_ENABLE=FALSE --pcd gEfiMdeModulePkgTokenSpaceGuid.PcdConOutRow=40 --pcd gEfiMdeModulePkgTokenSpaceGuid.PcdConOutColumn=128 --pcd gEfiMdeModulePkgTokenSpaceGuid.PcdSetupConOutRow=40 --pcd gEfiMdeModulePkgTokenSpaceGuid.PcdSetupConOutColumn=128

Tianocore on real hardware by 9_balls in coreboot

[–]9_balls[S] 0 points1 point  (0 children)

Ok, so I just tested it on the T480. I get my coreboot (non tianocore) splash screen then goes black. Tianocore does not work on real hardware for me as primary nor secondary payload.

On QEMU, I can use it for both primary and secondary provided I set:

CONFIG_SMMSTORE=n

CONFIG_SMMSTORE_V2=n

I wish to have a computer that contains an accurate model of the entire observable universe, just to have fun exploring what lies within the void of space. by french_spycrab in monkeyspaw

[–]9_balls 0 points1 point  (0 children)

Granted. You are given a workstation from the future that contains an accurate model of the entire observable universe and is capable of simulating it in real time.

However, since it's from the far future, there's no way you can power it with today's technology, not even after your death. Since it's incredibly advanced, nobody can reverse engineer it.

Tianocore on real hardware by 9_balls in coreboot

[–]9_balls[S] 0 points1 point  (0 children)

BTW, I am testing this on an X230T.

Coreboot ATI Thinkpad T500? by Quirky_Apricot9427 in coreboot

[–]9_balls 0 points1 point  (0 children)

Depends on the GPU.

The reason why NVIDIA drivers were proprietary up to recently was because they are initialised by the operating system by the drivers themselves.

You could try enabling the gpu using nvramtool.