From 78c7b8355832b9f3eb574788ab4c5a7d96f0486e Mon Sep 17 00:00:00 2001 From: Alyssa Rosenzweig Date: Mon, 3 Apr 2017 10:22:40 -0700 Subject: embedded code block top fix --- docs/hardware/dock.md | 1 + docs/hardware/index.md | 1 + docs/hardware/t60_heatsink.md | 1 + docs/hardware/t60_security.md | 4 +++- docs/hardware/x60_heatsink.md | 1 + docs/hardware/x60_security.md | 4 +++- 6 files changed, 10 insertions(+), 2 deletions(-) (limited to 'docs/hardware') diff --git a/docs/hardware/dock.md b/docs/hardware/dock.md index f1e86226..079a4e6f 100644 --- a/docs/hardware/dock.md +++ b/docs/hardware/dock.md @@ -8,6 +8,7 @@ Usually when people do full disk encryption, it's not really full disk, instead they still have a /boot in clear. + So an evil maid attack can still be done, in two passes: 1) Clone the hdd, Infect the initramfs or the kernel. 2) Wait for the user to enter its password, recover the password, diff --git a/docs/hardware/index.md b/docs/hardware/index.md index d7262669..f7a119dd 100644 --- a/docs/hardware/index.md +++ b/docs/hardware/index.md @@ -6,6 +6,7 @@ This section relates to hardware maintenance on supported targets. - [ThinkPad X60/X60s/X60T: Change keyboard](x60_keyboard.html) (the procedure on X200/X200S/X200T is almost identical) + - [ThinkPad X60/X60S: change the fan/heatsink](x60_heatsink.html) - [ThinkPad X60/X60s: How to change the LCD panel](x60_lcd_change.html) (incomplete. pics only for now) diff --git a/docs/hardware/t60_heatsink.md b/docs/hardware/t60_heatsink.md index f9fbde2b..a3ff52e3 100644 --- a/docs/hardware/t60_heatsink.md +++ b/docs/hardware/t60_heatsink.md @@ -11,6 +11,7 @@ Hardware requirements {#hardware_requirements} - rubbing alcohol or isopropyl alcohol, and thermal compound for changing CPU heatsink (procedure involves removing heatsink) + - thermal compound/paste (Arctic MX-4 is good. Others are also good.) diff --git a/docs/hardware/t60_security.md b/docs/hardware/t60_security.md index 6103c42d..974f8b43 100644 --- a/docs/hardware/t60_security.md +++ b/docs/hardware/t60_security.md @@ -231,6 +231,7 @@ Not covered yet: - Disable flashing the ethernet firmware - Disable SPI flash writes (can be re-enabled by unsoldering two parts) + - Disable use of xrandr/edid on external monitor (cut 2 pins on VGA) - Disable docking station (might be possible to do it in software, in coreboot upstream as a Kconfig option) @@ -248,7 +249,8 @@ half of the video to see how to do the above. Also not covered yet: --------------------- -- Intrusion detection: randomized seal on screws\ +- Intrusion detection: randomized seal on screws + Just put nail polish with lot of glider on the important screws, take some good pictures. Keep the pictueres and make sure of their integrity. Compare the nail polish with the pictures before powering diff --git a/docs/hardware/x60_heatsink.md b/docs/hardware/x60_heatsink.md index 35a9c48b..4493f954 100644 --- a/docs/hardware/x60_heatsink.md +++ b/docs/hardware/x60_heatsink.md @@ -22,6 +22,7 @@ Hardware requirements {#hardware_requirements} - your new fan and/or heatsink - CPU thermal compound (some say Arctic MX-4 is good, others are also 'ok') + - Something to spread the paste with diff --git a/docs/hardware/x60_security.md b/docs/hardware/x60_security.md index 1e9479ac..23dba9d0 100644 --- a/docs/hardware/x60_security.md +++ b/docs/hardware/x60_security.md @@ -137,6 +137,7 @@ Not covered yet: - Disable flashing the ethernet firmware - Disable SPI flash writes (can be re-enabled by unsoldering two parts) + - Disable use of xrandr/edid on external monitor (cut 2 pins on VGA) - Disable docking station (might be possible to do it in software, in coreboot upstream as a Kconfig option) @@ -152,7 +153,8 @@ half of the video to see how to do the above. Also not covered yet: --------------------- -- Intrusion detection: randomized seal on screws\ +- Intrusion detection: randomized seal on screws + Just put nail polish with lot of glider on the important screws, take some good pictures. Keep the pictueres and make sure of their integrity. Compare the nail polish with the pictures before powering -- cgit v1.2.3-70-g09d2