Open source firmware seems good from a security perspective, motherboard manufacturers seem to really suck balls. Could someone more knowledgeable about core boot explain it a bit to me if they’re willing? I don’t know too much about it besides I think I remember hearing framework uses it?
Coreboot by itself is just a hardware initialization code that basically tells your computer what to do when it turns on (i.e. get the processor running, turn on the RAM chips and get the capacity, then see what can be used for outputting display or serial console).
This is all executed before the user sees anything on the screen, at which point the handover to the payload firmware (i.e. the stuff you'd know as 'the BIOS/UEFI screen') is complete.
The coreboot project do also work with getting the BIOS/UEFI stuff running thru their initialization process as their payload, but the code for these payloads are completely separate projects.
7 Comments
tabular@lemmy.world · 33 pts · 14d
Screw AI RAMpocalypse, I'm buying an open source firmware motherboard.
galaxy_nova@lemmy.world · 22 pts · 14d
Open source firmware seems good from a security perspective, motherboard manufacturers seem to really suck balls. Could someone more knowledgeable about core boot explain it a bit to me if they’re willing? I don’t know too much about it besides I think I remember hearing framework uses it?
timkenhan@sopuli.xyz · 15 pts · 13d
Coreboot by itself is just a hardware initialization code that basically tells your computer what to do when it turns on (i.e. get the processor running, turn on the RAM chips and get the capacity, then see what can be used for outputting display or serial console).
This is all executed before the user sees anything on the screen, at which point the handover to the payload firmware (i.e. the stuff you'd know as 'the BIOS/UEFI screen') is complete.
The coreboot project do also work with getting the BIOS/UEFI stuff running thru their initialization process as their payload, but the code for these payloads are completely separate projects.
galaxy_nova@lemmy.world · 5 pts · 13d
Ah thanks, so this is essentially another step in having the full chain open source, that’s pretty cool.
eldebryn@lemmy.world · 13 pts · 14d
Does this essentially bypass the AMD PSP bit or am I misunderstanding something?
db2@lemmy.world · 16 pts · 13d
The psp runs at an even lower tier than this so no.
provectus@lemmy.ml · 8 pts · 13d
That sucks.