diff options
author | Alyssa Rosenzweig <alyssa@rosenzweig.io> | 2017-04-03 12:37:59 -0700 |
---|---|---|
committer | Alyssa Rosenzweig <alyssa@rosenzweig.io> | 2017-04-03 12:37:59 -0700 |
commit | cb8d13228f7dcb58f7e891dfd57493209ecc5518 (patch) | |
tree | 4d085d0b677e6ea0ac469ac829f32f4328676664 /docs/hardware | |
parent | 0b96f7a49f0428d23231403177583316ecee413f (diff) | |
download | librebootfr-cb8d13228f7dcb58f7e891dfd57493209ecc5518.tar.gz librebootfr-cb8d13228f7dcb58f7e891dfd57493209ecc5518.zip |
squeeze
Diffstat (limited to 'docs/hardware')
-rw-r--r-- | docs/hardware/dock.md | 7 | ||||
-rw-r--r-- | docs/hardware/index.md | 2 | ||||
-rw-r--r-- | docs/hardware/t60_heatsink.md | 8 | ||||
-rw-r--r-- | docs/hardware/t60_lcd_15.md | 4 | ||||
-rw-r--r-- | docs/hardware/t60_security.md | 26 | ||||
-rw-r--r-- | docs/hardware/x60_heatsink.md | 11 | ||||
-rw-r--r-- | docs/hardware/x60_keyboard.md | 4 | ||||
-rw-r--r-- | docs/hardware/x60_lcd_change.md | 4 | ||||
-rw-r--r-- | docs/hardware/x60_security.md | 22 |
9 files changed, 0 insertions, 88 deletions
diff --git a/docs/hardware/dock.md b/docs/hardware/dock.md index 079a4e6f..d5f694ac 100644 --- a/docs/hardware/dock.md +++ b/docs/hardware/dock.md @@ -1,14 +1,10 @@ % Notes about DMA and the docking station (X60/T60) - - - Use case: --------- Usually when people do full disk encryption, it's not really full disk, instead they still have a /boot in clear. - So an evil maid attack can still be done, in two passes: 1) Clone the hdd, Infect the initramfs or the kernel. 2) Wait for the user to enter its password, recover the password, @@ -65,7 +61,6 @@ | ICH7 | |_______________________| - The code: --------- Now if I look at the existing code, there is some superio drivers, like @@ -120,8 +115,6 @@ > The dock autodetection is tried only if it is also enabled > trough nvram. - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/index.md b/docs/hardware/index.md index f7a119dd..c864b9db 100644 --- a/docs/hardware/index.md +++ b/docs/hardware/index.md @@ -15,8 +15,6 @@ This section relates to hardware maintenance on supported targets. - [ThinkPad X60/X60S: hardware security](x60_security.html) - [ThinkPad T60: hardware security](t60_security.html) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/t60_heatsink.md b/docs/hardware/t60_heatsink.md index a3ff52e3..ef4502f5 100644 --- a/docs/hardware/t60_heatsink.md +++ b/docs/hardware/t60_heatsink.md @@ -4,8 +4,6 @@ Using this guide you can also change/upgrade the CPU. [Back to previous index](./) - - Hardware requirements {#hardware_requirements} ===================== @@ -14,16 +12,12 @@ Hardware requirements {#hardware_requirements} - thermal compound/paste (Arctic MX-4 is good. Others are also good.) - - Software requirements {#software_requirements} ===================== - xsensors - stress - - Disassembly {#recovery} =========== @@ -82,8 +76,6 @@ Always stress test ('stress -c 2' and xsensors. below 90C is ok) when replacing cpu paste/heatsink:\ ![](../images/t60_dev/0074.JPG) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/t60_lcd_15.md b/docs/hardware/t60_lcd_15.md index cf6611ad..f8c88720 100644 --- a/docs/hardware/t60_lcd_15.md +++ b/docs/hardware/t60_lcd_15.md @@ -6,8 +6,6 @@ the procedure is a bit more involved than on 15.1". [Back to previous index](./) - - Disassembly {#recovery} =========== @@ -46,8 +44,6 @@ It lives!\ ![](../images/t60_dev/0071.JPG) ![](../images/t60_dev/0072.JPG) ![](../images/t60_dev/0073.JPG) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/t60_security.md b/docs/hardware/t60_security.md index 974f8b43..d4d66ca4 100644 --- a/docs/hardware/t60_security.md +++ b/docs/hardware/t60_security.md @@ -5,8 +5,6 @@ tutorial is **incomplete** at the time of writing. [Back to previous index](./) - - Table of Contents ================= @@ -28,8 +26,6 @@ Software requirements {#software_requirements} - none (at least in the scope of the article as-is) - You probably want to encrypt your GNU+Linux install using LUKS - - Rationale ========= @@ -41,8 +37,6 @@ memory access that could communicate with inputs/outputs that could be used to remotely command the system (or leak data). All of this is purely theoretical for the time being. - - Disassembly {#procedure} =========== @@ -223,8 +217,6 @@ Always stress test ('stress -c 2' and xsensors. below 90C is ok) when replacing cpu paste/heatsink:\ ![](../images/t60_dev/0074.JPG) - - Not covered yet: ---------------- @@ -244,8 +236,6 @@ or directly to the video: A lot of this tutorial is based on that video. Look towards the second half of the video to see how to do the above. - - Also not covered yet: --------------------- @@ -267,8 +257,6 @@ Also not covered yet: - <https://en.wikipedia.org/wiki/Tempest_%28codename%29> - https://gitorious.org/gnutoo-for-coreboot/grub-assemble/source/a61f636797777a742f65f4c9c58032aa6a9b23c3: - - Extra notes =========== @@ -286,7 +274,6 @@ with the help of an SDR and some directional antennas[\[3\]](#ref3). controller](http://www.coreboot.org/Intel_82573_Ethernet_controller) on the X60 seems safe, according to Denis. - Risk level ---------- @@ -297,9 +284,6 @@ Risk level - Speakers: only problematic if the computer gets compromised. - EC: can be mitigated if following the guide on software security. - - - Further reading material (software security) ============================================ @@ -309,12 +293,9 @@ Further reading material (software security) /boot)](../gnulinux/encrypted_parabola.html) - [Notes about DMA access and the docking station](dock.html) - - References ========== - \[1\] physical access {#ref1} --------------------- @@ -327,8 +308,6 @@ to 400000\$, some other websites had prices 10 times lower but that but it was probably a typo. So if people increase their security it makes it more risky and more costly to attack people. - - \[2\] microphone {#ref2} ---------------- @@ -339,8 +318,6 @@ microphone jack can now become a headphone plug, that's called retasking. There is some support for it in GNU+Linux but it's not very well known. - - \[3\] Video (CCC) {#ref3} ----------------- @@ -349,9 +326,6 @@ their demo is experimental(their hardware also got damaged during the transport), the spies probably already have that since a long time. <http://berlin.ftp.media.ccc.de/congress/2013/webm/30c3-5356-en-Firmware_Fat_Camp_webm.webm> - - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/x60_heatsink.md b/docs/hardware/x60_heatsink.md index 4493f954..9930a12a 100644 --- a/docs/hardware/x60_heatsink.md +++ b/docs/hardware/x60_heatsink.md @@ -3,9 +3,6 @@ This guide will teach you how to replace the fan and heatsink on your ThinkPad X60. - - - Table of Contents ================= @@ -13,8 +10,6 @@ Table of Contents - [Software Requirements](#software_requirements) - [Disassembly](#procedure) - - Hardware requirements {#hardware_requirements} ===================== @@ -25,16 +20,12 @@ Hardware requirements {#hardware_requirements} - Something to spread the paste with - - Software requirements (for CPU stress testing) {#software_requirements} ============================================== - xsensors utility - stress utility - - Disassembly {#procedure} =========== @@ -106,8 +97,6 @@ the heatsink, reversing previous steps. **xsensors** (or **watch sensors** command) can be used to monitor heat. Below 90C is ok. - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/x60_keyboard.md b/docs/hardware/x60_keyboard.md index 27a3f80b..043eee24 100644 --- a/docs/hardware/x60_keyboard.md +++ b/docs/hardware/x60_keyboard.md @@ -9,8 +9,6 @@ same place, and it's the same procedure. [Back to previous index](./) - - Just follow these steps, and then reverse {#recovery} ========================================= @@ -20,8 +18,6 @@ Just follow these steps, and then reverse {#recovery} ![](../images/x60_keyboard/4.JPG)\ ![](../images/x60_keyboard/5.JPG) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/x60_lcd_change.md b/docs/hardware/x60_lcd_change.md index 727f74d4..bf046626 100644 --- a/docs/hardware/x60_lcd_change.md +++ b/docs/hardware/x60_lcd_change.md @@ -4,8 +4,6 @@ This tutorial is incomplete, and only pictures for now. [Back to previous index](./) - - ![](../images/x60_lcd_change/0001.JPG) ![](../images/x60_lcd_change/0002.JPG) ![](../images/x60_lcd_change/0003.JPG) @@ -14,8 +12,6 @@ This tutorial is incomplete, and only pictures for now. ![](../images/x60_lcd_change/0006.JPG) ![](../images/x60_lcd_change/0007.JPG) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/x60_security.md b/docs/hardware/x60_security.md index 23dba9d0..3c1ec193 100644 --- a/docs/hardware/x60_security.md +++ b/docs/hardware/x60_security.md @@ -5,8 +5,6 @@ tutorial is **incomplete** at the time of writing. [Back to previous index](./) - - Table of Contents ================= @@ -14,8 +12,6 @@ Table of Contents - [Software Requirements](#software_requirements) - [The procedure](#procedure) - - Hardware requirements {#hardware_requirements} ===================== @@ -29,8 +25,6 @@ Software requirements {#software_requirements} - none (at least in the scope of the article as-is) - You probably want to encrypt your GNU+Linux install using LUKS - - Rationale ========= @@ -174,8 +168,6 @@ Also not covered yet: - <https://en.wikipedia.org/wiki/Tempest_%28codename%29> - https://gitorious.org/gnutoo-for-coreboot/grub-assemble/source/a61f636797777a742f65f4c9c58032aa6a9b23c3: - - Extra notes =========== @@ -193,7 +185,6 @@ with the help of an SDR and some directional antennas[\[3\]](#ref3). controller](http://www.coreboot.org/Intel_82573_Ethernet_controller) on the X60 seems safe, according to Denis. - Risk level ---------- @@ -204,9 +195,6 @@ Risk level - Speakers: only problematic if the computer gets compromised. - EC: can be mitigated if following the guide on software security. - - - Further reading material (software security) ============================================ @@ -216,12 +204,9 @@ Further reading material (software security) /boot)](../gnulinux/encrypted_parabola.html) - [Notes about DMA access and the docking station](dock.html) - - References ========== - \[1\] physical access {#ref1} --------------------- @@ -234,8 +219,6 @@ to 400000\$, some other websites had prices 10 times lower but that but it was probably a typo. So if people increase their security it makes it more risky and more costly to attack people. - - \[2\] microphone {#ref2} ---------------- @@ -246,8 +229,6 @@ microphone jack can now become a headphone plug, that's called retasking. There is some support for it in GNU+Linux but it's not very well known. - - \[3\] Video (CCC) {#ref3} ----------------- @@ -256,9 +237,6 @@ their demo is experimental(their hardware also got damaged during the transport), the spies probably already have that since a long time. <http://berlin.ftp.media.ccc.de/congress/2013/webm/30c3-5356-en-Firmware_Fat_Camp_webm.webm> - - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 |