The thinkpad support is mostly done by the free software part of the coreboot co... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		pgeorgi on March 22, 2015 \| parent \| context \| favorite \| on: Hacking BIOS chips isn't just the NSA's domain any... The thinkpad support is mostly done by the free software part of the coreboot community, and they don't touch devices that come with a Management Engine (see http://me.bios.io/). If "security conscious" includes not having any unexplained binaries around, the Asus C201 Chromebook may actually be the best bet (maybe there will be devices with the same chipset but more laptop-like properties eg regarding storage), but it's less powerful than a contemporary Intel based device.

nextos on March 22, 2015 [–]

Thanks. Probably misunderstanding something, but I thought some Thinkpads that do have Coreboot support are equipped with Management Engine?

http://www.coreboot.org/Intel_Management_Engine

pgeorgi on March 22, 2015 | [–]

Some chipsets before Sandy Bridge had that processor, but were able to operate normally without its firmware, with a disabled ME.

Since Sandy Bridge it's mandatory.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact