aboutsummaryrefslogtreecommitdiff
path: root/docs/hardware
diff options
context:
space:
mode:
Diffstat (limited to 'docs/hardware')
-rw-r--r--docs/hardware/dock.md1
-rw-r--r--docs/hardware/index.md1
-rw-r--r--docs/hardware/t60_heatsink.md1
-rw-r--r--docs/hardware/t60_security.md4
-rw-r--r--docs/hardware/x60_heatsink.md1
-rw-r--r--docs/hardware/x60_security.md4
6 files changed, 10 insertions, 2 deletions
diff --git a/docs/hardware/dock.md b/docs/hardware/dock.md
index f1e86226..079a4e6f 100644
--- a/docs/hardware/dock.md
+++ b/docs/hardware/dock.md
@@ -8,6 +8,7 @@
Usually when people do full disk encryption, it's not really full disk,
instead they still have a /boot in clear.
+
So an evil maid attack can still be done, in two passes:
1) Clone the hdd, Infect the initramfs or the kernel.
2) Wait for the user to enter its password, recover the password,
diff --git a/docs/hardware/index.md b/docs/hardware/index.md
index d7262669..f7a119dd 100644
--- a/docs/hardware/index.md
+++ b/docs/hardware/index.md
@@ -6,6 +6,7 @@ This section relates to hardware maintenance on supported targets.
- [ThinkPad X60/X60s/X60T: Change keyboard](x60_keyboard.html) (the
procedure on X200/X200S/X200T is almost identical)
+
- [ThinkPad X60/X60S: change the fan/heatsink](x60_heatsink.html)
- [ThinkPad X60/X60s: How to change the LCD
panel](x60_lcd_change.html) (incomplete. pics only for now)
diff --git a/docs/hardware/t60_heatsink.md b/docs/hardware/t60_heatsink.md
index f9fbde2b..a3ff52e3 100644
--- a/docs/hardware/t60_heatsink.md
+++ b/docs/hardware/t60_heatsink.md
@@ -11,6 +11,7 @@ Hardware requirements {#hardware_requirements}
- rubbing alcohol or isopropyl alcohol, and thermal compound for
changing CPU heatsink (procedure involves removing heatsink)
+
- thermal compound/paste (Arctic MX-4 is good. Others are also good.)
diff --git a/docs/hardware/t60_security.md b/docs/hardware/t60_security.md
index 6103c42d..974f8b43 100644
--- a/docs/hardware/t60_security.md
+++ b/docs/hardware/t60_security.md
@@ -231,6 +231,7 @@ Not covered yet:
- Disable flashing the ethernet firmware
- Disable SPI flash writes (can be re-enabled by unsoldering two
parts)
+
- Disable use of xrandr/edid on external monitor (cut 2 pins on VGA)
- Disable docking station (might be possible to do it in software, in
coreboot upstream as a Kconfig option)
@@ -248,7 +249,8 @@ half of the video to see how to do the above.
Also not covered yet:
---------------------
-- Intrusion detection: randomized seal on screws\
+- Intrusion detection: randomized seal on screws
+
Just put nail polish with lot of glider on the important screws,
take some good pictures. Keep the pictueres and make sure of their
integrity. Compare the nail polish with the pictures before powering
diff --git a/docs/hardware/x60_heatsink.md b/docs/hardware/x60_heatsink.md
index 35a9c48b..4493f954 100644
--- a/docs/hardware/x60_heatsink.md
+++ b/docs/hardware/x60_heatsink.md
@@ -22,6 +22,7 @@ Hardware requirements {#hardware_requirements}
- your new fan and/or heatsink
- CPU thermal compound (some say Arctic MX-4 is good, others are also
'ok')
+
- Something to spread the paste with
diff --git a/docs/hardware/x60_security.md b/docs/hardware/x60_security.md
index 1e9479ac..23dba9d0 100644
--- a/docs/hardware/x60_security.md
+++ b/docs/hardware/x60_security.md
@@ -137,6 +137,7 @@ Not covered yet:
- Disable flashing the ethernet firmware
- Disable SPI flash writes (can be re-enabled by unsoldering two
parts)
+
- Disable use of xrandr/edid on external monitor (cut 2 pins on VGA)
- Disable docking station (might be possible to do it in software, in
coreboot upstream as a Kconfig option)
@@ -152,7 +153,8 @@ half of the video to see how to do the above.
Also not covered yet:
---------------------
-- Intrusion detection: randomized seal on screws\
+- Intrusion detection: randomized seal on screws
+
Just put nail polish with lot of glider on the important screws,
take some good pictures. Keep the pictueres and make sure of their
integrity. Compare the nail polish with the pictures before powering