Recetly there have been a couple of discuusions again on the security of chips, their firmware and open hardware alternatives.
As many people (me included) have limited knowledge about low level subjects I ask for information about firmware. This should serve two purposes: a) transparency and b) transfer of knowledge.
I don’t know how much information can be contributet by purism and by the community and which information is availible at all. What I imagine is a table with the columns
“Librem product”
Chip model
firmware/microcode/blobs
purpose
Information about freeness, openness, licence, blob / nonblob, proprietarity
I can only guess that chips can include multiple different codes.
As I am writing from mobile I don’t know whether the forum has tables. Maybe this is something for the wiki (at least in long term).
The first step is to ask people to run lshw and dmidecode on different Librem products, so you know what are the components in each model. It would also be helpful if people would take photos of their motherboards, or write down the labels of the chips on the board.
You have to find out which SSD models Purism has used. Then look up who makes the controller for each SSD model. The Atheros ath9k WiFi/BT doesn’t have firmware, so you don’t have to worry about that one.
We know that there is proprietary firmware in the Intel Core CPU/GPU, SSD and embedded controller. There is probably an LCD controller as well that has firmware. Once you have a list of the chips in a Librem model, then you can look up those parts to find out if they have firmware.
So does anyone want to help by posting the output of lshw and dmidecode on your machine and making a list of the chips on the motherboard?
Thanks. Actually, first, as I mentioned, I am using Qubes OS, so this command won’t work (another one is needed instead: “qubes-dom0-update lshw”). Second, I am not sure I am ready to install something non-default in dom0 for security reasons (one should install there as few things as possible).