System76 Will Ship Linux Laptops With Coreboot-Based Open-Source Firmware (forbes.com)

Article summary

System76 is shipping Linux laptops with Coreboot-based open-source firmware. The laptops will still require the Intel FSP and ME, but the ME will be disabled early in the boot process. The company's firmware applications are open source, and the source code is available on GitHub. The move is seen as a step towards more open and secure computing.

Main themes

• open-source firmware
• Coreboot
• Intel ME
• secure computing
• laptop hardware
• RISC-V

What commenters say

• System76's use of Coreboot-based open-source firmware is a significant step towards more secure and open computing, but it does not completely eliminate the risk of closed firmware.
• The presence of Intel ME in the laptops undermines the claim of open firmware, as it is a closed and potentially vulnerable component.
• The disablement of ME after booting is seen as insufficient by some, as it may still be active during the boot process and potentially compromise the system.
• RISC-V may not be a solution to the problem of closed firmware, as it can also have closed firmware and other security risks.
• The use of open-source firmware is not enough to guarantee security, as other components such as the memory controller and bus can still be vulnerable to exploits.
• Some argue that true security requires a completely custom and open hardware and software stack, including the CPU and memory controller.
• Others see System76's effort as a positive step towards more open and secure computing, even if it is not perfect.
• The definition of 'open firmware' is disputed, with some arguing that it requires a completely open and inspectable codebase, while others see it as a more nuanced issue.