From fc78adb247dab33aef90b27343205fbd97ccac0f Mon Sep 17 00:00:00 2001 From: Martin Kepplinger Date: Fri, 8 Feb 2019 13:29:43 +0100 Subject: [PATCH] x230: README: avoid confusion in our 8M external flashing docs We recently added that the whole 8M chip flashing is optional, which is important indeed. In brough some more stuff in which may be confusion. We don't want to mention one specific OS because we're really generic people should try to install whatever they want. Also, "the command defaults to..." is misleading, as there are commandline options applied in our example. Remove that. And lastly, as long as users make the backups we always suggest in the examples, they can change things at any time. --- x230/README.md | 21 ++++++--------------- 1 file changed, 6 insertions(+), 15 deletions(-) diff --git a/x230/README.md b/x230/README.md index 1f0d703..3386061 100644 --- a/x230/README.md +++ b/x230/README.md @@ -187,29 +187,20 @@ based supply for a second USB port (like [this](https://de.aliexpress.com/item/1 #### ifd unlock and me_cleaner: the 8MB chip -Flashing the bottom chip (closer to you) is optional. It has the same pinout than -the upper chip. -This allows you to enable in-system flashing (flashing without opening the Thinkpad) -and/or to neuter the the +Flashing the bottom chip (closer to you) is optional. It has the same pinout +than the upper chip. This allows you to enable/disable in-system flashing +(without disassembling the Thinkpad) and/or to neuter the the [Intel Management Engine](https://en.wikipedia.org/wiki/Intel_Management_Engine) for [security reasons](https://en.wikipedia.org/wiki/Intel_Management_Engine#Security_vulnerabilities). -Choose wisely, by unlocking any software can re-flash the BIOS. By neutering the -Intel ME you can not have a e.g. -[measured boot with Qubes](https://github.com/QubesOS/qubes-antievilmaid/tree/master/anti-evil-maid). - -The following command defaults to unlocking the BIOS and cleaning the IME. - sudo ./external_install_bottom.sh -m -k -That's it. Keep the backup safe. - - -Background (just so you know): +That's it. Keep the backup safe. Here are the options (just so you know): -* The `-m` option above also runs `me_cleaner -S` before flashing back, see [me_cleaner](https://github.com/corna/me_cleaner). +* The `-m` option applies `me_cleaner -S` before flashing back, see +[me_cleaner](https://github.com/corna/me_cleaner). * The `-l` option will (re-)lock your flash ROM, in case you want to force yourself (and others) to hardware-flashing, see [updating](#updating).