aboutsummaryrefslogtreecommitdiff
path: root/docs/hardware
diff options
context:
space:
mode:
Diffstat (limited to 'docs/hardware')
-rw-r--r--docs/hardware/dock.md7
-rw-r--r--docs/hardware/index.md2
-rw-r--r--docs/hardware/t60_heatsink.md8
-rw-r--r--docs/hardware/t60_lcd_15.md4
-rw-r--r--docs/hardware/t60_security.md26
-rw-r--r--docs/hardware/x60_heatsink.md11
-rw-r--r--docs/hardware/x60_keyboard.md4
-rw-r--r--docs/hardware/x60_lcd_change.md4
-rw-r--r--docs/hardware/x60_security.md22
9 files changed, 0 insertions, 88 deletions
diff --git a/docs/hardware/dock.md b/docs/hardware/dock.md
index 079a4e6f..d5f694ac 100644
--- a/docs/hardware/dock.md
+++ b/docs/hardware/dock.md
@@ -1,14 +1,10 @@
% Notes about DMA and the docking station (X60/T60)
-
-
-
Use case:
---------
Usually when people do full disk encryption, it's not really full disk,
instead they still have a /boot in clear.
-
So an evil maid attack can still be done, in two passes:
1) Clone the hdd, Infect the initramfs or the kernel.
2) Wait for the user to enter its password, recover the password,
@@ -65,7 +61,6 @@
| ICH7 |
|_______________________|
-
The code:
---------
Now if I look at the existing code, there is some superio drivers, like
@@ -120,8 +115,6 @@
> The dock autodetection is tried only if it is also enabled
> trough nvram.
-
-
Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\
Permission is granted to copy, distribute and/or modify this document
under the terms of the Creative Commons Attribution-ShareAlike 4.0
diff --git a/docs/hardware/index.md b/docs/hardware/index.md
index f7a119dd..c864b9db 100644
--- a/docs/hardware/index.md
+++ b/docs/hardware/index.md
@@ -15,8 +15,6 @@ This section relates to hardware maintenance on supported targets.
- [ThinkPad X60/X60S: hardware security](x60_security.html)
- [ThinkPad T60: hardware security](t60_security.html)
-
-
Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\
Permission is granted to copy, distribute and/or modify this document
under the terms of the Creative Commons Attribution-ShareAlike 4.0
diff --git a/docs/hardware/t60_heatsink.md b/docs/hardware/t60_heatsink.md
index a3ff52e3..ef4502f5 100644
--- a/docs/hardware/t60_heatsink.md
+++ b/docs/hardware/t60_heatsink.md
@@ -4,8 +4,6 @@ Using this guide you can also change/upgrade the CPU.
[Back to previous index](./)
-
-
Hardware requirements {#hardware_requirements}
=====================
@@ -14,16 +12,12 @@ Hardware requirements {#hardware_requirements}
- thermal compound/paste (Arctic MX-4 is good. Others are also good.)
-
-
Software requirements {#software_requirements}
=====================
- xsensors
- stress
-
-
Disassembly {#recovery}
===========
@@ -82,8 +76,6 @@ Always stress test ('stress -c 2' and xsensors. below 90C is ok) when
replacing cpu paste/heatsink:\
![](../images/t60_dev/0074.JPG)
-
-
Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\
Permission is granted to copy, distribute and/or modify this document
under the terms of the Creative Commons Attribution-ShareAlike 4.0
diff --git a/docs/hardware/t60_lcd_15.md b/docs/hardware/t60_lcd_15.md
index cf6611ad..f8c88720 100644
--- a/docs/hardware/t60_lcd_15.md
+++ b/docs/hardware/t60_lcd_15.md
@@ -6,8 +6,6 @@ the procedure is a bit more involved than on 15.1".
[Back to previous index](./)
-
-
Disassembly {#recovery}
===========
@@ -46,8 +44,6 @@ It lives!\
![](../images/t60_dev/0071.JPG) ![](../images/t60_dev/0072.JPG)
![](../images/t60_dev/0073.JPG)
-
-
Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\
Permission is granted to copy, distribute and/or modify this document
under the terms of the Creative Commons Attribution-ShareAlike 4.0
diff --git a/docs/hardware/t60_security.md b/docs/hardware/t60_security.md
index 974f8b43..d4d66ca4 100644
--- a/docs/hardware/t60_security.md
+++ b/docs/hardware/t60_security.md
@@ -5,8 +5,6 @@ tutorial is **incomplete** at the time of writing.
[Back to previous index](./)
-
-
Table of Contents
=================
@@ -28,8 +26,6 @@ Software requirements {#software_requirements}
- none (at least in the scope of the article as-is)
- You probably want to encrypt your GNU+Linux install using LUKS
-
-
Rationale
=========
@@ -41,8 +37,6 @@ memory access that could communicate with inputs/outputs that could be
used to remotely command the system (or leak data). All of this is
purely theoretical for the time being.
-
-
Disassembly {#procedure}
===========
@@ -223,8 +217,6 @@ Always stress test ('stress -c 2' and xsensors. below 90C is ok) when
replacing cpu paste/heatsink:\
![](../images/t60_dev/0074.JPG)
-
-
Not covered yet:
----------------
@@ -244,8 +236,6 @@ or directly to the video:
A lot of this tutorial is based on that video. Look towards the second
half of the video to see how to do the above.
-
-
Also not covered yet:
---------------------
@@ -267,8 +257,6 @@ Also not covered yet:
- <https://en.wikipedia.org/wiki/Tempest_%28codename%29>
- https://gitorious.org/gnutoo-for-coreboot/grub-assemble/source/a61f636797777a742f65f4c9c58032aa6a9b23c3:
-
-
Extra notes
===========
@@ -286,7 +274,6 @@ with the help of an SDR and some directional antennas[\[3\]](#ref3).
controller](http://www.coreboot.org/Intel_82573_Ethernet_controller) on
the X60 seems safe, according to Denis.
-
Risk level
----------
@@ -297,9 +284,6 @@ Risk level
- Speakers: only problematic if the computer gets compromised.
- EC: can be mitigated if following the guide on software security.
-
-
-
Further reading material (software security)
============================================
@@ -309,12 +293,9 @@ Further reading material (software security)
/boot)](../gnulinux/encrypted_parabola.html)
- [Notes about DMA access and the docking station](dock.html)
-
-
References
==========
-
\[1\] physical access {#ref1}
---------------------
@@ -327,8 +308,6 @@ to 400000\$, some other websites had prices 10 times lower but that but
it was probably a typo. So if people increase their security it makes it
more risky and more costly to attack people.
-
-
\[2\] microphone {#ref2}
----------------
@@ -339,8 +318,6 @@ microphone jack can now become a headphone plug, that's called
retasking. There is some support for it in GNU+Linux but it's not very
well known.
-
-
\[3\] Video (CCC) {#ref3}
-----------------
@@ -349,9 +326,6 @@ their demo is experimental(their hardware also got damaged during the
transport), the spies probably already have that since a long time.
<http://berlin.ftp.media.ccc.de/congress/2013/webm/30c3-5356-en-Firmware_Fat_Camp_webm.webm>
-
-
-
Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\
Permission is granted to copy, distribute and/or modify this document
under the terms of the Creative Commons Attribution-ShareAlike 4.0
diff --git a/docs/hardware/x60_heatsink.md b/docs/hardware/x60_heatsink.md
index 4493f954..9930a12a 100644
--- a/docs/hardware/x60_heatsink.md
+++ b/docs/hardware/x60_heatsink.md
@@ -3,9 +3,6 @@
This guide will teach you how to replace the fan and heatsink on your
ThinkPad X60.
-
-
-
Table of Contents
=================
@@ -13,8 +10,6 @@ Table of Contents
- [Software Requirements](#software_requirements)
- [Disassembly](#procedure)
-
-
Hardware requirements {#hardware_requirements}
=====================
@@ -25,16 +20,12 @@ Hardware requirements {#hardware_requirements}
- Something to spread the paste with
-
-
Software requirements (for CPU stress testing) {#software_requirements}
==============================================
- xsensors utility
- stress utility
-
-
Disassembly {#procedure}
===========
@@ -106,8 +97,6 @@ the heatsink, reversing previous steps.
**xsensors** (or **watch sensors** command) can be used to monitor heat.
Below 90C is ok.
-
-
Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\
Permission is granted to copy, distribute and/or modify this document
under the terms of the Creative Commons Attribution-ShareAlike 4.0
diff --git a/docs/hardware/x60_keyboard.md b/docs/hardware/x60_keyboard.md
index 27a3f80b..043eee24 100644
--- a/docs/hardware/x60_keyboard.md
+++ b/docs/hardware/x60_keyboard.md
@@ -9,8 +9,6 @@ same place, and it's the same procedure.
[Back to previous index](./)
-
-
Just follow these steps, and then reverse {#recovery}
=========================================
@@ -20,8 +18,6 @@ Just follow these steps, and then reverse {#recovery}
![](../images/x60_keyboard/4.JPG)\
![](../images/x60_keyboard/5.JPG)
-
-
Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\
Permission is granted to copy, distribute and/or modify this document
under the terms of the Creative Commons Attribution-ShareAlike 4.0
diff --git a/docs/hardware/x60_lcd_change.md b/docs/hardware/x60_lcd_change.md
index 727f74d4..bf046626 100644
--- a/docs/hardware/x60_lcd_change.md
+++ b/docs/hardware/x60_lcd_change.md
@@ -4,8 +4,6 @@ This tutorial is incomplete, and only pictures for now.
[Back to previous index](./)
-
-
![](../images/x60_lcd_change/0001.JPG)
![](../images/x60_lcd_change/0002.JPG)
![](../images/x60_lcd_change/0003.JPG)
@@ -14,8 +12,6 @@ This tutorial is incomplete, and only pictures for now.
![](../images/x60_lcd_change/0006.JPG)
![](../images/x60_lcd_change/0007.JPG)
-
-
Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\
Permission is granted to copy, distribute and/or modify this document
under the terms of the Creative Commons Attribution-ShareAlike 4.0
diff --git a/docs/hardware/x60_security.md b/docs/hardware/x60_security.md
index 23dba9d0..3c1ec193 100644
--- a/docs/hardware/x60_security.md
+++ b/docs/hardware/x60_security.md
@@ -5,8 +5,6 @@ tutorial is **incomplete** at the time of writing.
[Back to previous index](./)
-
-
Table of Contents
=================
@@ -14,8 +12,6 @@ Table of Contents
- [Software Requirements](#software_requirements)
- [The procedure](#procedure)
-
-
Hardware requirements {#hardware_requirements}
=====================
@@ -29,8 +25,6 @@ Software requirements {#software_requirements}
- none (at least in the scope of the article as-is)
- You probably want to encrypt your GNU+Linux install using LUKS
-
-
Rationale
=========
@@ -174,8 +168,6 @@ Also not covered yet:
- <https://en.wikipedia.org/wiki/Tempest_%28codename%29>
- https://gitorious.org/gnutoo-for-coreboot/grub-assemble/source/a61f636797777a742f65f4c9c58032aa6a9b23c3:
-
-
Extra notes
===========
@@ -193,7 +185,6 @@ with the help of an SDR and some directional antennas[\[3\]](#ref3).
controller](http://www.coreboot.org/Intel_82573_Ethernet_controller) on
the X60 seems safe, according to Denis.
-
Risk level
----------
@@ -204,9 +195,6 @@ Risk level
- Speakers: only problematic if the computer gets compromised.
- EC: can be mitigated if following the guide on software security.
-
-
-
Further reading material (software security)
============================================
@@ -216,12 +204,9 @@ Further reading material (software security)
/boot)](../gnulinux/encrypted_parabola.html)
- [Notes about DMA access and the docking station](dock.html)
-
-
References
==========
-
\[1\] physical access {#ref1}
---------------------
@@ -234,8 +219,6 @@ to 400000\$, some other websites had prices 10 times lower but that but
it was probably a typo. So if people increase their security it makes it
more risky and more costly to attack people.
-
-
\[2\] microphone {#ref2}
----------------
@@ -246,8 +229,6 @@ microphone jack can now become a headphone plug, that's called
retasking. There is some support for it in GNU+Linux but it's not very
well known.
-
-
\[3\] Video (CCC) {#ref3}
-----------------
@@ -256,9 +237,6 @@ their demo is experimental(their hardware also got damaged during the
transport), the spies probably already have that since a long time.
<http://berlin.ftp.media.ccc.de/congress/2013/webm/30c3-5356-en-Firmware_Fat_Camp_webm.webm>
-
-
-
Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\
Permission is granted to copy, distribute and/or modify this document
under the terms of the Creative Commons Attribution-ShareAlike 4.0
generated by cgit v1.2.3-70-g09d2 (git 2.47.1) at 2024-12-15 01:46:19 +0000