Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update documents to mention software only method. #35

Closed
YellowOnion opened this issue Jan 23, 2020 · 7 comments
Closed

Update documents to mention software only method. #35

YellowOnion opened this issue Jan 23, 2020 · 7 comments

Comments

@YellowOnion
Copy link

There's a method here for flashing firmware using an exploit in earlier versions of Lenovo bios'

https://github.com/gch1p/thinkpad-bios-software-flashing-guide

I'm working on a live CD (NixOS base) with all the tools needed which will be GPL'd when necessary.

@tlaurion
Copy link
Collaborator

tlaurion commented Jan 23, 2020

@YellowOnion : keep in mind that the IFD (descriptor) still needs to be flashed externally to change ME neutered+deactivated partition size to use freed ME 5mb available space by distributing the expended IFD regions and trimmed ME binaries, since we are running out of space to add more tools.

IFD (descriptor), in that case, would still need to be externally flashed. The 12mb coreboot image in last link being splitted out in two externally flashable roms (top and bottom rom images) seems to be the way to go, unless the IFD could also be flashed internally.

Edit: links corrected, typos.

@snmcmillan
Copy link

I'd like to also add that a LiveUSB of said tools already exists at https://github.com/n4ru/1vyrain/

@YellowOnion
Copy link
Author

YellowOnion commented Jan 23, 2020

@SebastianMcMillan 1vyrain's script is not GPL, the author has a feud with r/thinkpad and files DMCA to anyone linking it on the reddit, The live USB is not "open", contains copyrighted content (the modded lenovo bios), I don't know how he made it, or how to reproduce it, and it's compressed using a proprietary format (rar), and is a massive 3.6GB, my NixOS based CD has most of the tools so far, and is only 250MB, will be reproducible by anyone, will not include proprietary code.

@digmorepaka
Copy link

@YellowOnion https://medium.com/@n4ru/1vyrain-self-build-documentation-5059825b1fdb

  1. 1vyrain script is public at https://github.com/n4ru/1vyrain

  2. The live USB image is a 257MB Debian live usb in iso format

  3. You can go extract your own bios region image from Lenovo's update package and use UEFIPatch

@YellowOnion
Copy link
Author

YellowOnion commented Feb 22, 2020

License
I retain all rights to the code found in this repo (excluding the BIOS roms and the patcher binary), and no one may reproduce, distribute, or create derivative works from this repo without including this README.me in its entirety!

This project is not permitted to be shared on the ThinkPad subreddit.

The Live CD was not, when I made the comment public, it is still not public, it was a big huge rar compressed image for a 4GB USB, the script for flashing does not build the Live CD, we cannot reproduce the the image exactly because of this, the script is copyrighted under a non-free licence (as quoted above).

Please check dates a lot can happen in a month.

And please try to infer my point, a project like heads is not meant to rely on proprietary code, dodgy isos from an unknown individual, especially when that individual has a history of using DMCA to control information.

@tlaurion
Copy link
Collaborator

tlaurion commented Aug 1, 2020

Unfortunately, it is impossible to unlock IFD externally. This needs SPI flash to be backuped, have ifdtool unlock ther IFD inside of the ROM image unlocked and flashed back. While this boot disk can reflash and neuter already defined regions inside of the IFD, it cannot redefine those regions inside of IFD flash descriptor.

That was linked to external project issue and closed

@tlaurion tlaurion closed this as completed Aug 1, 2020
@tlaurion
Copy link
Collaborator

tlaurion commented Aug 1, 2020

@YellowOnion feel free to tag me if you think this issue was closed where it should have stayed open.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants