Hardware backdoors, what we know and what we don't know: a discussion thread

[FranklyFlawless]

See also:

Why do Librem laptops ship with Manufacturing Mode enabled?

After CVE-2018-4251, this is a huge potential security risk. https://trmm.net/Bootguard Apple was quick to fix it last year with an urgent patch. By urgent I mean one that goes to the next update without delays or next major version, which makes it very high severity. Also The attack is rather simple, with this mode on, an attacker can reflash any BIOS region including Bootguard the ME region with INTEL-SA-00086, and basically persist on the machine forever, or unless the user reflas…

• INTEL-SA-00086

INTEL-SA-00086 does not affect the Librem 14 since it uses a 10th generation CPU (Comet Lake), but it affects the entire Hardware > Librem 13/15 product line.