1

Topic: How can I audit my PC and what tampering should I look out for?

I've just ordered a new Libreboot Thinkpad to install Hyperbola in and I'm wondering...
However unlikely it may be (which I don't want to discuss), let's say somebody intercepts it and tampers with it in some way - what kind of tampering can I expect? In the firmware? CPU? GPU? RAM? Storage drives? Anything else?

Whatever happens, how can I audit my new computer?
If anything's amiss, what can I do about it?

Thanks.

2

Re: How can I audit my PC and what tampering should I look out for?

burhen42 wrote:

I've just ordered a new Libreboot Thinkpad to install Hyperbola in and I'm wondering...
However unlikely it may be (which I don't want to discuss), let's say somebody intercepts it and tampers with it in some way - what kind of tampering can I expect? In the firmware? CPU? GPU? RAM? Storage drives? Anything else?

Whatever happens, how can I audit my new computer?
If anything's amiss, what can I do about it?

Thanks.

You should be mostly fine, unless the EC firmware or the intel vulnerabilities are an issue...

That being said, I have had no major malware issues since using libreboot/coreboot devices. 

I am however in a year hoping to break my bondage from intel devices.  More or less I mean... wink

HyperbolaBSD: The Future of Secure Libre Lightweight Operating Systems!

3

Re: How can I audit my PC and what tampering should I look out for?

burhen42 wrote:

I've just ordered a new Libreboot Thinkpad to install Hyperbola in and I'm wondering...
However unlikely it may be (which I don't want to discuss), let's say somebody intercepts it and tampers with it in some way - what kind of tampering can I expect? In the firmware? CPU? GPU? RAM? Storage drives? Anything else?

Whatever happens, how can I audit my new computer?
If anything's amiss, what can I do about it?

Thanks.

you should be safe but if you dont feel like it, and want to make sure all is set right just build libreboot from source or download rom already built and reflash it, you wont need external hardware now just install flashrom in your system and use this command:

 doas flashrom -p internal:laptop=force_I_want_a_brick -w <name_of_selected_rom> 

other than that i dont think you should worry much

"This life is short Eternity is long who want good trees plant good seeds"

"quote" taken from sam garrens an english writer and speaker,
  Were do you think we live!

4

Re: How can I audit my PC and what tampering should I look out for?

rachad wrote:
burhen42 wrote:

I've just ordered a new Libreboot Thinkpad to install Hyperbola in and I'm wondering...
However unlikely it may be (which I don't want to discuss), let's say somebody intercepts it and tampers with it in some way - what kind of tampering can I expect? In the firmware? CPU? GPU? RAM? Storage drives? Anything else?

Whatever happens, how can I audit my new computer?
If anything's amiss, what can I do about it?

Thanks.

you should be safe but if you dont feel like it, and want to make sure all is set right just build libreboot from source or download rom already built and reflash it, you wont need external hardware now just install flashrom in your system and use this command:

 doas flashrom -p internal:laptop=force_I_want_a_brick -w <name_of_selected_rom> 

other than that i dont think you should worry much

Hi. So what should I enter in place of "force_I_want_a_brick"?
Just so its crystal clear what I gotta do. Thanks.

5

Re: How can I audit my PC and what tampering should I look out for?

i can see that it looks confusing smile leave it as it is you just change <name_of_selected_rom> replacing the "<>" as well

"This life is short Eternity is long who want good trees plant good seeds"

"quote" taken from sam garrens an english writer and speaker,
  Were do you think we live!