summaryrefslogtreecommitdiffstats
path: root/site
diff options
context:
space:
mode:
authorFrancis Rowe <info@gluglug.org.uk>2015-07-28 07:49:53 (EDT)
committer Francis Rowe <info@gluglug.org.uk>2015-07-28 07:49:53 (EDT)
commit30683b65251323475f2b3b354cb9c3d320553f87 (patch)
tree7b18d5cc7292949be788461b0579b8d0a9092c93 /site
parent792af2ca50165aef8e1c2bf3c6c834b320edaac9 (diff)
downloadlibreboot.org-30683b65251323475f2b3b354cb9c3d320553f87.zip
libreboot.org-30683b65251323475f2b3b354cb9c3d320553f87.tar.gz
libreboot.org-30683b65251323475f2b3b354cb9c3d320553f87.tar.bz2
FAQ (ME section): links for DRM and tivoization
Diffstat (limited to 'site')
-rw-r--r--site/faq/index.php5
1 files changed, 3 insertions, 2 deletions
diff --git a/site/faq/index.php b/site/faq/index.php
index a59a390..9d62da1 100644
--- a/site/faq/index.php
+++ b/site/faq/index.php
@@ -93,7 +93,8 @@
removed (with the ME processor permanently deactivated), but not replaced (due to cryptographic signature checking on the firmware).
The management engine provides remote access capabilities, independently from the running operating system. It has full access to
your RAM, and it has full networking support. It also handles the TPM module, AMT (Active Management Technology), Boot Guard and
- various DRM mechanisms. The ME also performs some basic hardware initialization and power management, on recent systems.
+ various <a href="https://defectivebydesign.org/what_is_drm_digital_restrictions_management">DRM</a> mechanisms.
+ The ME also performs some basic hardware initialization and power management, on recent systems.
</p>
<p>
All modern Intel systems built after around the year 2008 (after ICH9) require this blob, and
@@ -111,7 +112,7 @@
if Intel wanted to release the source code for this blob, they could not do so. Even if they did, the ME
firmware is cryptographically signed, where the signature is verified at boot time. If you try to use your own modified
version of the ME firmware, it will be rejected by the ARC processor and your system will not boot. In other words,
- the ME firmware is <i>tivoized</i>.
+ the ME firmware is <i><a href="https://www.gnu.org/proprietary/proprietary-tyrants.html">tivoized</a></i>.
</p>
<p>
The Management Engine is a giant backdoor, allowing full access to your entire system for malicious adversaries.