Pages12345678910
Explained comic · 10 pages

Before Linux Boots: Free Firmware and Coreboot

Read it as a flipbook →

The source is a meetup announcement about free BIOS and firmware, featuring a presentation and AMA with Ronald Minnich, inventor of Coreboot. It covers the security and freedom problems of proprietary firmware blobs like Intel ME, how Coreboot addresses them, and building libre systems.

Page One

Every computer runs firmware in the silent gap between pressing power and the operating system starting.

Page Two

Firmware initializes memory, clocks, and buses, then passes control to a bootloader and the operating system.

Page Three

Conventional BIOS and UEFI arrive as unmodifiable binaries controlled by the vendor rather than the owner.

Page Four

Blobs like Intel ME run as hidden co-processors with privileged access, active even when the main computer is off.

Page Five

Unreadable firmware means unverifiable security and loss of control over hardware you supposedly own.

Page Six

Coreboot replaces closed BIOS with open, inspectable firmware, developed by its inventor Ronald Minnich.

Page Seven

Coreboot keeps a small init core, then loads a chosen payload, shrinking the amount of code you must trust.

Page Eight

me_cleaner disables most of the Intel ME because it usually cannot be removed, reducing the hidden attack surface.

Page Nine

Non-x86 platforms frequently avoid ME-style blobs, making end-to-end libre firmware stacks more practical to build.

Page Ten

Flashing Coreboot and me_cleaner lets owners inspect, shrink, and replace hidden firmware, reclaiming control of the boot process.

Share to LinkedIn Share to X Share to Bluesky