ThinkWiki - User contributions [en]

Talk:PreDesktop Area

2005-07-14T23:46:17Z

84.191.148.177: /* What about that IBM link??? */

==Use the HPA for GNU/Linux?==
More interesting than removing the HPA (which includes a.o. Acces IBM Predesktop Area, some other tools and a backup of the pre-installed OS) would be to use this area for GNU/Linux too. At least, removing the HPA only saves 3,5 GB on my 60 GB hard disk. It would be worth a try to see whether the backup of the pre-installed OS on the largest PSA could be replaced by a backup of your favourite GNU/Linux distribution.

Elaborating on my ideas a few days later, I'd guess the following could be tried:
* see whether GRUB can be made to boot the Access IBM Predekstop Area (I guess by "chainloading" the bootsector of its PSA). Right now GRUB refuses to load sectors outside the partioned area. I've got absolutely no idea if it's possible to write a hack to overcome that restriction. Need to contact the GRUB people about that ...
* write a HPA or SPA driver. That driver should provide something like "/dev/hpa", "/dev/hpa0", etc or "/dev/spa", "/dev/spa0", whatever. The idea here is that it allows you to simply mount (ro!) the Hidden Protected Area (given the correct BIOS settings). Probably just an addaption of the current drivers for (IDE?) harddisks. (This might mean "/dev/hda" and "/dev/hpa" overlap: dangerous?) That would probably need - way - more coding skills than I have ...
* write some userspace tools for the HPA/the SPAs (things like: dumpbeer, printDoS).

It should be clear these are basically random ideas. Still feedback would be appreciated ...
----
Hei,

interesting ideas, but i'd only see a point in it if one could keep Win and Linux rescue stuff in the HPA. That means it would need to be expandable or fit the stuff for both systems.
[[User:Wyrfel|Wyrfel]] 20:03, 15 Mar 2005 (CET)
----
Thanks.

Short answer: that should be possible.

Long answer: I see little in the specs (as I understand them now) to stop one from adding (say) an extra 3 GB GNU/Linux-rescue PSA or something like that. We might try to do that first by changing the BEER and DoS manually. (Not sure whether Phoenix added some proprietary stuff to keep you from booting it. The PSA should always be accesable with the proper BIOS setting.) It might be mandatory to put it on a FAT filesystem. The hard part probably is to have it show up in the Access IBM Predesktop Area. (My guess is you need to regenerate the FirstSight "graphical shell". If that's correct we probably only can use the FirstWare tools "hidden" on their little PSA. That's no fun. Well it might a little fun if we try FreeDOS).

[[User:Pebolle|Paul Bolle (not logged in)]]
----
Update: a trivial patch to grub allows it to also work outside the partioned area:

--- /var/tmp/rpm/BUILD/grub-0.95/stage2/disk_io.c.oud 2004-05-23 18:35:24.000000000 +0200
+++ /var/tmp/rpm/BUILD/grub-0.95/stage2/disk_io.c 2005-03-18 22:38:30.050907408 +0100
@@ -297,8 +297,8 @@
* Check partition boundaries
*/
if (sector < 0
- || ((sector + ((byte_offset + byte_len - 1) >> SECTOR_BITS))
- >= part_length))
+ /*|| ((sector + ((byte_offset + byte_len - 1) >> SECTOR_BITS))
+ >= part_length)*/)
{
errnum = ERR_OUTSIDE_PART;
return 0;

I made a grub CD with a grub patched with the above. Now I can "cat" the bootsector of the Predesktop Area from the grub shell (when booting of that grub CD). But I haven't yet managed to boot the Predesktop Area (dangerous stuff!) To be continued ...

[[User:Pebolle|Paul Bolle]] Fri Mar 18 22:42:43 CET 2005

----

I've been playing around with the predesktop area tonight. I was simply trying to just leave the diagnostics stuff and remove the windows part. I wrote some programs to read/write the BEER data and stuff, but I wasn't able to get the system to boot it, it kept erroring "Authentication of System Services failed" (or something along those lines). I will play around with this some more later

[[User:Invisi|Tim Nordell]]
----

A quick look with a hexeditor gave me two instances of "Application authentication has failed!" in the FirstSight application. Does that sound familair?

[[User:Pebolle|Paul Bolle]] Fri Apr 1 19:35:30 CEST 2005

----

Actually it wasn't that. I did a search of that too, the message itself was not in the predesktop area at all. What also is interesting is the fw*.exe utilities for manipulating the predesktop area, contains the string "MD5" which makes me wonder if there is an md5 hash of each "predesktop" partition. I know on the IBM whitepaper it states there being a signature so that non-signed applications can not be run. Could a simple "md5" be the signature?

[[User:Invisi|Tim Nordell]] 12:01, 3 Apr 2005 (CEST)

----

*What is it that you were trying to do (what did trigger the error you saw)?

*About ten of the fw*.exe utilities contain the phrase "MD5 Checksums do not match". So they could very well be using MD5 sums for some sort of validation. But they could use the MD5 sums in a lot of ways actually, so I won't yet speculate ...

[[User:Pebolle|Paul Bolle]] Sun Apr 3 15:11:10 CEST 2005

== Predesktop Area ==

I made a program that takes the BEER record at the end, parses it out to a ".cfg" file, lets you modify it, recalibrate the start spots for the records, and write it out to disk again. It doesn't directly access hda, 'cept for reading the original beer record. It makes a script file to go with the files you have, to read in the HPA data, and to write it out again with the new record.

Anyways, I tried simply removing the last record from the BEER, which is the windows recovery partition. It didn't like that.

----

Did you update the two's complement checksum at the end of the BEER?

[[user:Pebolle|Paul Bolle]]

== TODO ==

* Ad a section on dmesg and hdparm -I output:
(...)
Commands/features:
Enabled Supported:
(...)
* Host Protected Area feature set
(...)
SET MAX security extension
Address Offset Reserved Area Boot
(...)

* Check boot parameters: is hda=stroke still valid?
Kernel command line: ro root=LABEL=/ acpi=off hda=stroke
ide_setup: hda=stroke -- BAD OPTION

[[User:Pebolle|Paul Bolle]]

== Two's Complement ==

Yep, I updated that. If I don't update that, it doesn't even say that failed message. I also made a seperate program to update the checksum so you can also modify the beer record by hand with a hex editor and have valid checksums.

== RE: How to remove it / ATTENTION! ==

Please tell us how you are trying to access the BIOS. Via "Access IBM" or F12 (or something similar)? "Access IBM" at start up shouldn't work when you remove the HPA (that's my guess at least) but F12 at start up should work (I would be very surprised if it didn't ....).

[[user:Pebolle|Paul Bolle]] Fri Jul 15 01:11:33 CEST 2005
==What about that IBM link???==
Hei Paul, why did you remove that IBM link? I think it's nice to know what IBM has to say about this, even if it doesn't help much. At least i find it interesting that they have something to say about it.

Wyrfel.
----
Ok, I'm getting it, roughly. Now what's the "Recovering Partition" as opposed to the HPA??? Wyrfel.

Talk:PreDesktop Area

2005-07-14T23:42:19Z

84.191.148.177:

Installation instructions for the ThinkPad T40p

2005-07-14T15:39:06Z

84.191.148.177:

Specific installation notes for the Thinkpad T40p.

Please choose (or create) the Operating System of interest:

*[[:Category:Debian | Debian/Sid]] [[Installing Debian/Sid on a Thinkpad T40p | installation]]
*[[:Category:FreeBSD | FreeBSD]] [[Installing FreeBSD on a Thinkpad T40p | installation]]

[[Category:T40p]]

Installing Mandrake 10 on a ThinkPad R50

2005-07-14T15:38:41Z

84.191.148.177:

==External Sources==

*[http://forum.mandrivaclub.com/viewtopic.php?t=29040 Install Mandrake 10.0 official on IBM R50]

[[Category:R50]] [[Category:Mandrake]]

Installing Mandrake 10 on a ThinkPad R50

2005-07-14T15:38:21Z

84.191.148.177:

==External Sources==

*[http://forum.mandrivaclub.com/viewtopic.php?t=29040 Install Mandrake 10.0 official on IBM R50]

[[Category:Mandrake]]

Installation instructions for the ThinkPad R50

2005-07-14T15:37:17Z

84.191.148.177:

Specific installation notes for the ThinkPad R50.

Please choose (or create) the Operating System of interest:

* [[:Category:Debian | Debian/Sid]] [[Installing Debian/Sid on a Thinkpad R50 | installation]]

* [[:Category:Mandrake | Mandrake 10]] [[Installing Mandrake 10 on a Thinkpad R50|Installation]]

[[Category:R50]]

ThinkPad Button

2005-07-14T15:32:52Z

84.191.148.177:

{| width="100%"
|style="vertical-align:top;padding-right:20px;width:10px;" | [[Image:Accessibm.png]]
|style="vertical-align:top" |
<div style="margin: 0; margin-right:10px; border: 1px solid #dfdfdf; padding: 0em 1em 1em 1em; background-color:#F8F8FF; align:right;">
The Access IBM Button is a button situated in the upper left corner of the keyboard on modern ThinkPads. It is intended to be a means of quick access to help and support. Technically it is nothing else than a button that can be configured to launch a certain piece of software.

On earlier models this button is labelled "ThinkPad".
</div>
|}
__NOTOC__
== Linux support ==
Under Linux, the IBM ThinkPad(tm) special keys can be enabled using [[tpb]].

I.e., to make pressing the Access IBM Button launch ntpctl, add the following line /etc/tpbrc file:
THINKPAD /usr/bin/X11/xterm -T ntpctl -e ntpctl

To make pressing the Access IBM Button launch the ThinkWiki homepage, add the following line:
<nowiki>THINKPAD /usr/bin/firefox http://www.thinkwiki.org</nowiki>

See the [[tpb]] page and the [[How to get special keys to work | ThinkPad special keys HOWTO]] for more information.

== {{Windows}} support (2000 or XP) ==
If you want to customize the program that is launched when the Access IBM button is pressed while
the machine is running Windows (2000 or XP) you can change the following registry entry:

HKEY_LOCAL_MACHINE\SOFTWARE\IBM\TPHOTKEY\8001

Here are the default values:

[HKEY_LOCAL_MACHINE\SOFTWARE\IBM\TPHOTKEY\8001]
"File"="C:\\Program Files\\IBM\\Access IBM\\\\aibm.exe"
"DispName"="Access IBM"

== Related Links ==
*[http://www.pc.ibm.com/us/think/thinkvantagetech/accessibm.html IBMs Access IBM ThinkVantage Technology page]
*[http://www-3.ibm.com/pc/support/site.wss/AIBM-TOOLS.html Access IBM - Customization Guide]

==Models featuring this Technology==
*ThinkPad {{A Series}}
*ThinkPad {{G Series}}
*ThinkPad {{R Series}}
*ThinkPad {{T Series}}
*ThinkPad {{X Series}}

[[Category:Glossary]]

ThinkPad Button

2005-07-14T15:32:42Z

84.191.148.177: /* Windows support (2000 or XP) */

Template:Xandros

2005-07-14T15:31:56Z

84.191.148.177:

[[:Category:Xandros|Xandros]] [[Category:Xandros]]

Template:Ubuntu

2005-07-14T15:31:18Z

84.191.148.177:

[[:Category:Ubuntu|Ubuntu]] [[Category:Ubuntu]]

Template:Mandriva

2005-07-14T15:30:51Z

84.191.148.177:

[[:Category:Mandriva|Mandriva]] [[Category:Mandriva]]

Template:Mandrake

2005-07-14T15:30:28Z

84.191.148.177:

[[:Category:Mandrake|Mandrake]] [[Category:Mandrake]]

Template:LFS

2005-07-14T15:30:00Z

84.191.148.177:

[[:Category:LFS|Linux from Scratch]] [[Category:LFS]]

Template:Knoppix

2005-07-14T15:29:32Z

84.191.148.177:

[[:Category:Knoppix|Knoppix]] [[Category:Knoppix]]

Template:Kanotix

2005-07-14T15:29:09Z

84.191.148.177:

[[:Category:Kanotix|Kanotix]] [[Category:Kanotix]]

Template:Gentoo

2005-07-14T15:28:42Z

84.191.148.177:

[[:Category:Gentoo|Gentoo]] [[Category:Gentoo]]

Template:Redhat

2005-07-14T15:28:11Z

84.191.148.177:

[[:Category:Redhat|Redhat]] [[Category:Redhat]]

Template:FreeBSD

2005-07-14T15:27:42Z

84.191.148.177:

[[:Category:FreeBSD|FreeBSD]] [[Category:FreeBSD]]

Template:Debian

2005-07-14T15:27:17Z

84.191.148.177:

[[:Category:Debian|Debian]] [[Category:Debian]]

Template:Fedora

2005-07-14T15:26:37Z

84.191.148.177:

[[:Category:Fedora|Fedora Core]] [[Category:Fedora]]

Template:Fedora

2005-07-14T15:26:26Z

84.191.148.177:

[[:Category:Fedora|Fedora Core]] [[Ctageory:Fedora]]

Category:T42

2005-07-14T11:05:10Z

84.191.148.177:

{| width="100%"
|style="vertical-align:top" |
[[image:ThinkPadT40.jpg|ThinkPad T42]]
|style="vertical-align:top" |
<div style="margin: 0; margin-right:10px; border: 1px solid #dfdfdf; padding: 0em 1em 1em 1em; background-color:#F8F8FF; align:right;">
=== ThinkPad T42 ===
This pages gives an overview of all ThinkPad T42 related topics.
==== Features ====
* Intel Pentium M 1.5, 1.6, 1.7 or 1.8GHz CPU
* One of the following graphics controllers:
** [[ATI Mobility Radeon 7500]] with 32MB
** [[ATI Mobility Radeon 9000]] with 64MB
** [[ATI Mobility Radeon 9600]] with 64MB
* One of the following displays:
** 14.1" TFT display with 1024x768 resolution
** 14.1" TFT display with 1400x1050 resolution
** 15.0" TFT display with 1024x768 resolution
** 15.0" TFT display with 1400x1050 resolution
* 256, 512MB or 1GB memory standard
* 30, 40, 60 or 80GB HDD
* AD1981B AC'97 Audio controller
* [[Ethernet Controllers|Intel 10/100/1000 Ethernet]]
* [[UltraBay|UltraBay Slim]] with one of the following:
** DVD-ROM
** DVD-ROM/CD-RW Combo
** DVD-RW
* CDC slot with one of the following:
** [[IBM Integrated 56K Modem (MDC-2)]]
** [[IBM Integrated Bluetooth III with 56K Modem (BMDC-2)]]
* MiniPCI slot with one of the following:
** none (open)
** [[IBM 11b/g Wireless LAN Mini PCI Adapter]]
** [[IBM 11a/b/g Wireless LAN Mini PCI Adapter]]
** [[IBM 11a/b/g Wireless LAN Mini PCI Adapter II]]
** [[Intel PRO/Wireless LAN 2100 3B Mini PCI Adapter]]
** [[Intel PRO/Wireless 2200BG Mini-PCI Adapter]]
* [[Embedded Security Subsystem|IBM Embedded Security Subsystem 2.0]]
* [[Active Protection System|IBM Active Protection System]]
* [[Integrated Fingerprint Reader]] on selected systems
</div>
|}
* [ftp://ftp.software.ibm.com/pc/pccbbs/mobiles_pdf/13n6243.pdf ThinkPad T40/p, T41/p, T42/p - Hardware Maintenance Manual (April 2004)] (5,391,719 Bytes)

[[Category:Models]]

Talk:TCPA/TCG - Trusted or Treacherous

2005-07-14T07:09:55Z

84.191.148.177: /* Not sure where to begin... */

== Discussion about the article "Trusted or Treacherous" ==

Please add you comments here.

You can use the "Plus"(+)-Button next to the "edit"-button at the top of this page to add you comments at the right spot ;-)

--[[User:Pitsche|Pitsche]] 11:38, 4 Jul 2005 (CEST)

== Plagiarism? ==

Large parts of this article apparently consist of unattributed, near-verbatim excerpts from a SANE2004 paper by Weis, Lucks, and Bogk, [http://www.cryptolabs.org/CCC2004TCunendlich/WeisLucksBogkSane2004tcg12.pdf TCG 1.2 - fair play with the 'Fritz' chip?]. Regardless of whether one believes that general political/ethical concerns about Trusted Computing belong on a Thinkpad-specific site, wholesale copying of unidentified, and presumably copyrighted, material is not cool, and could get the whole project in trouble.

I would suggest that the non-original parts of this article be removed and replaced by an external link to the above-mentioned paper; any particularly crucial short excerpts (as permitted by "fair use") should be clearly identified as such. The specific information about how the TCG specifications are implemented on various Thinkpad models can stay, of course.

== The Source is under Creative Commons, isn't it? ==

Hello Andrzej,

yes, you are right, another version of this text on a website of the presentation of the annual chaos computer club is one of my sources, but I think, that one is under creative commons license by-nc-sa 2.0 de. And are the presentations of the chaos computer congress not also free unless the speakers don't want it??????

This license allows to copy, distribute, display, perform or modify the text as long as it is published under exactly the same creative commons license and licensees may not use the work for commercial purposes - unless they get the licensor's permission.

My problem was, I had a lot more sources in a different language than english and my first drafts were way to long!

It didn't worked to keep it that short but detailed, as Ruediger and Adreas wrote it.

But if you think, after my explanation the actual version is still problematic, I will delete it of course!

--[[User:Pitsche|Pitsche]] 21:12, 4 Jul 2005 (CEST)

----
If the original authors have explicitly published the text under a suitably permissive CC license, there should be no legal problem in using it in a ThinkWiki article. Even in that case, however, the source needs to be clearly identified, and there should be a link to the complete original article.

-- Andrzej

----
Okay Andrzej, I will work on that and tell all of you about it in the coming days, if I have enough time for it.

Unless that, feel free to take out the critical passages of the article or modify it, if you have the time and if you want to do it.

But there is a problem: I slightly changed the text, put two sentence together to one etc. How can I now cite the source?

--[[User:Pitsche|Pitsche]] 21:38, 4 Jul 2005 (CEST)

----
No problem; just say that your ThinkWiki article is ''based on'' the Weis et al. paper, and give a reference. The parts of their text that you include don't have to be verbatim copies; indeed, the whole point is that you are creating a ''derived work'' (e.g., by bringing in material from other sources), which they supposedly explicitly allow in the CC license. To be on the safe side, you should probably also include a link to a web page documenting that the original text is indeed freely licensed, or say that you have personally obtained permission from the authors.

-- Andrzej
----
Agreed. There should be a general statement in the article about the source the article is derived from, or rather sources - i seem to have used different sources of information for some of my edits. ;-) I'll add mine on next edit.

Wyrfel.

== Thanks for your work, i like it ==

Hello Wyrfel,

thank you very much for editing and restructering of that article.

I think, I know know what you and Andrzej want and I will try in he next days, to change the article in that way, okay?

P.S.: I don't know, why I loose my logged-in status from time to time, perhaps my connection. I am sorry, that there are IP-Adresses instead of my unsername "pitsche", I hope, no one gets confused, which edit is by me and which one by someone else :-o

Sorry.

--[[User:Pitsche|Pitsche]] 21:15, 4 Jul 2005 (CEST)
----
About your login status: ThinkWiki doesn't cache logins. This means everytime your connection breaks or your browser closes you will have to login again. But don't worry, we can figure out what's from you and if not - it's a Wiki. ;-) I'm doing a lot of edits without being logged in as well.

Wyrfel.
----
== No exact TCG specifications needed ==

Hello again!

I am against writing about the specific specifications, because it will make the article longer and everybody, who is '''really''' interested in the specifications has several possibilities to get it for free in the WWW or from Cryptolabs.org or from the CCC.

--[[User:Pitsche|Pitsche]] 21:22, 4 Jul 2005 (CEST)
----
I think the TCG specifications should appear there somewhere. At least at current state of my knowledge about the subject i'd think that having them there is helpful for the user to understand what ESS 1 and 2 are capable of. Of course we shouldn't post the whole specs, but some really compressed summary, similar to the 'feature-list' in "TC - Trusted Computing". Pitsche, if you could point me to them i could do it. Also, a link to the original TCPA specs would be good. The links themselves should be added to the Links section.

That's it so far...i like the way we work on this.

Wyrfel.
----
One more thing...

I think the TCPA implementation in current ThinkPads is pretty harmless. At least at it's current software state. You just don't use it (respectively don't install the supporting software layer) and it never gets active. One interesting aspect of finding out what the chip is capable of is if it could be forced to be used by later software upgrades or not.

Wyrfel.

----
Hello Wyrfel!

I also like the way we work on this article. I think, their will be a improvement in the end, that makes everybody happy and is interesting for the users of the ThinkWiki.

Now to your comments:

# I deleted the 'exact' TCG-Specifications, because there is a paragraph about ESS 1.0 and ESS 2.0, where I think the informations should be placed about how much TCG is in ESS, "what ESS 1 and 2 are capable of" and "if it could be forced to be used by later software upgrades or not" (qutoes from you). Correct me if I am wrong, but otherwiese it would be included two times in the article. Or am I making a mistake here?
# I agree with you: At least one hyperlink to the TCG-Specifications should be included in the "Related Links" (right now it is No. 9 in the Table Of Contents). Perhaps on wednesday or thursday I will do this...
# I don't know, if the TCPA implementation in current ThinkPads is pretty harmless. I understood Ruediger and Andreas in their presentation at the 21. Chaos Communication Congress very different to that, because the were referring almost only to IBM and Microsoft. <br />
:It might be a rhetorical technique to fascinate their audience and to keep them awake and following. But my impression of them both was, that they are very concerned scientist (or at least CCC-Activists), who really see the current TCG-Implementations that problematic. And I also felt that they don't need to panic the people just for getting more attention and that they would'nt be disappointed, if they could turn their attention to something else and did'nt have to fight against TCPA/TCG/Palladium :-)

P.S.: Effeff, well, how do I say this, hmmm, does anybody know, where I can find a list of 'common market prices' in USD or Euro for used ThinkPads?

Perhaps something like this [http://www.macnews.de/index.php?_mcnpage=6760 www.macnews.de/index.php?_mcnpage=6760] ???? "Jehova, Jehova, Jeh- outch!" ;-)

Background: I was offered a not so much used ThinkPad A30 with a SXGA+ - TFT-Display without any pixelerrors, but some problems at the drive slot at the right side. Specs of it are: CPU 1.0 Ghz, RAM 512 MB, HDD original IBM 60 GB with 5400 rpm and CD-RW/DVD-ROM-Combo drive...

I have much difficulty for naming a price, because I am not familiar with the cost of repairing that drive slot. At eBay I found some A30p around 600,- Euro and a A22p for 529,- Euro -- is the A30 between? :-o

Thanks!

--[[User:Pitsche|Pitsche]] 01:37, 5 Jul 2005 (CEST)

== a bit paranoid? ==

1) The [[Embedded Security Subsystem]] page already contains a list of ThinkPad's that <u>might</u> have the security chip, no need to start listing older machines that predate it.

2) And noticed how I said <u>might</u>, because some of the ThinkPads listed had the security chip as a feature that was not available on every model in the range. You can see this on the individual ThinkPad product pages, as it will say that it was available <i>on select models</i>. So for example it is perfectly possible to get a second-hand R40, T40 or X31 without the chip. If you want to know the exact type-model of machines with or without the securitychip, look at tawbook.pdf or trwbook.pdf

3) To my knowledge, the chip is disabled by default on every machine that has it, you need to manually enable it in the BIOS first. I have three ThinkPads currently, two have the security chip, and neither Windows or Linux is able to detect it in the disabled state.

4) Ironically Linux actually has better support for it then windows out-of-the-box. The latest Linux kernels have a driver for it, while MS is not shipping anything that supports it, and will not for some time.

----
Hello Mr. "67.87.7.65",

thanks for your comments, much appreciated.

TC can be a good thing, but what TCG (formerly TCPA) wants, can't be a good thing at all and that has nothing to do with paranoia. At least I hope I am not paranoid, just critical about every marketing phrase :-)

I am sorry, if you got the impression, that the ThinkPad models with E.S.S. 1.0 or 2.0 are treacherous. To be honest, I don't have a ThinkPad (not yet) and therefore I can't see for myself, how and what TCG-specs are implemented.

As stated before, Ruediger and Andreas were mostly talking about IBM and MS in their presentation at the 21. Chaos Communication Congress in December 2004 and they seem to talk about this topic for some years now, not only at the congress.

Other sources together with their presentation at 21C3 let me come to the conclusion, that you can't belive the statements of the TCG and their members concerning your (cyber) civil rights and your right of freedom of choice as user and owner of degitial devices such as laptops equipped with a 'Fritz'-chip.

I thought, the article about E.S.S. was a little bit too superficial and the dispute and the critics were not mentionend at all. The EMbedded Security Subsystem sounded like a fantastic thing, that every laptop building and selling company should implement. But why was IBM using that new name and not 'Fritz'-chip or TCG or TCPA? Guess why... :-)

On the other side, my article was / is very much about the dispute and the critics. Okay. Perhaps I can shorten this a litte bit more, add some stuff from the TCG in it (like Wyrfel asked for) etc.

And I have a suggestion to make:

'''How about putting the list of "TCPA/TCG clean models" into the E.S.S.-article and leaving "Trusted or Treacherous" to talk only about Trusted Computing, the TCG-sepcs and the dispute about that specs and giving the readers the hyperlinks so that they can make a judgement by their own???'''

ThinkWiki would be free of that 'conflict', the copied text paragraphs would be gone, the discussion could end, etc.

--[[User:Pitsche|Pitsche]] 12:16, 6 Jul 2005 (CEST)

----
Yepp, we could do that - leave the list of ESS featured ThinkPads on the ESS page. I think we don't even need the 'clean'-list, since it is just every ThinkPad that doesn't have it. ;-)

However, i agree to "67.87.7.65" ;-) in his impression. He's right about that even of the ESS featured models, some don't have the chip. He's also right about that with the current implementation in ThinkPads you are pretty free to choose using it or not using it. Hence it's a feature. As i see it trouble arises from different sides... the software and the law. These both could eventually force you using it. However, i think there's no need to by a A30 or whatever, just because it doesn't feature that chip. You can buy any other ThinkPad, never enable the chip and be happy. What this article is good for, however, is to make people concious about both, what it really can do, and what privacy and security risks are involved with it.

And BTW, i think that your assumtion of IBM using the ESS name instead of TCG/TCPA to confuse people is a little paranoid. ;-) Look at any IBM page about the ESS and you'll find the words "TCG compliant" within the first sentences, linking to the TCG page. Being suspicious is good, but don't give in to speculations too much.

Wyrfel.

----
Hello Wyrfel,

no, no, don't get me worng please. The new name by IBM is not to confuse people, but to have it copyrighted and stuff like that.

Gues why IBM is calling it UltraBay, Dell is calling it MediaBay and FixBay and the third Company I forgot the name of is calling it SelectBay?

Because they want to keep the rights of their names / marketing phrases and don't want to pay license fees to the competitors.

For example even the Nike Logo (called "swoosh") is protected due to heavy brand pirating in developing countires and china.

Sniff, I am *not* paranoid.

(-:

--[[User:Pitsche|Pitsche]] 21:26, 6 Jul 2005 (CEST)

----

Hi, ok, ok. That's just what i think, but when you originally posted it it sounded like a reference to the TCPA/TCG releated name changes. I'm glad that you're not paranoid. ;-) Wyrfel.
----

== Not sure where to begin... ==

Hi, I started to edit the Open-Source Software section, but then realized that I'd basically end up deleting it, and didn't want that w/o discussion.

There's no certification process for trusted computing applications at all, anywhere. Right now, you can write an app using trousers, the Trusted Computing Software Stack for Linux, and distribute it as widely as you'd like. Everyone with a TPM would be able to use it on Linux w/o restrictions, just like any other app.

In other sections of the doc, there is discussion on how difficult it is to separate Palladium and TC. This should not be difficult at all... Palladium is a massive set of technologies built on top of a TSS Stack for windows. Right now, very few apps have been written for Linux and its TSS.

ALso, how can I get my thinkwiki username to appear after my posts?
Thanks, shpedoikal
----
Hi, if you are logged in, you can use <nowiki>~~~~</nowiki> at the end of your posts. It will be replaced by your user name and a date stamp. Or you just write it manually.

Concerning the OpenSource-Section...i think this section being here offers us two things to fill it with: statements about OpenSource projects dealing with TC like TrouSerS and notes about the threat that technics like remote attestation would incline.

Wyrfel
----

ACPI sleep power drain test script

2005-07-14T07:01:24Z

84.191.148.177:

The following script will suspend your notebook to ram and output some statistics about the power drain during suspend to <tt>/var/log/battery.log</tt>. The output will look something like this:

Di Jan 11 14:01:15 CET 2005
before: 41170 mWh
after: 41000 mWh
diff: -170 mWh
seconds: 1671 sec
result: -366 mW
Congratulations, your model seems NOT to be affected.

{{NOTE|This is not totally reliable, e.g. on some (all?) R32 the values
reported by ACPI for the battery are wrong by a factor 10, i.e. they are actually
reported in cWh instead of mWh. Thus the script thinks that the power
consumption is only a tenth of its actual value.
}}

Please save this script to a file, i.e. <tt>sleep.sh</tt>, make it executable (<code>chmod +x sleep.sh</code>) and execute it as root while your notebook is on battery. To get representative values you should leave the notebook suspended for at least 20 minutes.

#!/bin/sh
# sleep.sh test script for measuring power drain during suspend-to-ram with ACPI

# remove USB for external mouse before sleeping
if lsmod | grep '^usbhid' >/dev/null ; then
/sbin/modprobe -r -s usbhid
fi
if lsmod | grep '^uhci_hcd' >/dev/null ; then
/sbin/modprobe -r -s uhci_hcd
fi
if lsmod | grep '^ehci_hcd' >/dev/null ; then
/sbin/modprobe -r -s ehci_hcd
fi

hwclock --systohc

LOG=/var/log/battery.log
date >> $LOG
DATE_BEFORE=`date +%s`
BAT_BEFORE=`grep 'remaining capacity' /proc/acpi/battery/BAT0/state | awk '{print $3}'`
echo "before: $BAT_BEFORE mWh" >> $LOG

echo 3 > /proc/acpi/sleep

DATE_AFTER=`date +%s`
BAT_AFTER=`grep 'remaining capacity' /proc/acpi/battery/BAT0/state | awk '{print $3}'`
echo "after: $BAT_AFTER mWh" >> $LOG

DIFF=`echo "$BAT_AFTER - $BAT_BEFORE" | bc`
SECONDS=`echo "$DATE_AFTER - $DATE_BEFORE" | bc`
echo "diff: $DIFF mWh" >> $LOG
echo "seconds: $SECONDS sec" >> $LOG
USAGE=`echo "($DIFF * 60 * 60) / ($SECONDS)" | bc`
echo "result: $USAGE mW" >> $LOG
if [ $USAGE -gt -1000 ]
then
echo "Congratulations, your model seems NOT to be affected." >> $LOG
else
echo "Your model seems to be affected." >> $LOG
fi
if [ $SECONDS -lt 1200 ]
then
echo "!!! The notebook was suspended less than 20 minutes." >> $LOG
echo "!!! To get representative values please let the notebook sleep" >> $LOG
echo "!!! for at least 20 minutes." >> $LOG
fi
echo "" >> $LOG

if !(lsmod | grep '^ehci_hcd') >/dev/null ; then
/sbin/modprobe -s ehci_hcd
fi
if !(lsmod | grep '^uhci_hcd') >/dev/null ; then
/sbin/modprobe -s uhci_hcd
fi
if !(lsmod | grep '^usbhid') >/dev/null ; then
/sbin/modprobe -s usbhid
fi

hwclock --hctosys

The script was originally written by Jan-Hendrik Benter and was modified a little for this page.

[[Category:Scripts]]

Problem with high power drain in ACPI sleep

2005-07-14T07:00:37Z

84.191.148.177: /* Affected Models */ moving note to the script page

Information about the problem of too high power drain in ACPI sleep mode.

==Problem description==
Several people realized that their ThinkPads eat up too much power while suspended to ram via ACPI. Compared to APM suspend to ram the power drain is experienced to be about 10 times as high, 2-5 Watts. This empties the battery within one or two days.

==Affected Models==

*Different symptoms have been reported for different models. In some models the origin of the power drain is obvious ([[Problem with LCD backlight remaining on during ACPI sleep|backlight on during suspend]]), in other models there is no obvious reason.

*On some models/configurations the higher power drain couldn't even be realized or was at least significantly lower.

*The T4x Thinkpad series (T40, T40p, T41, T41p, T42, T42p, T43, T43p) suspends to ram just fine, and there are no components that are obviously left powered up. The [[UltraBay]] and network light is on, but that is the same under windows (but under APM sleep to RAM those lights are OFF).

*This is a driver problem and can be fixed in software. For the T4x series, there is a fix available but it has not yet made its way into the official kernel (as of linux 2.6.12).

The following table gives an overview of the models suffering from the mysterious power drain. To find out about your model, you may use the following [[ACPI sleep power drain test script | script]]. It creates a file <tt>/var/log/battery.log</tt> which will tell you if you are affected or not.

{| border="1" cellspacing="0" cellpadding="2"
|-
! style="vertical-align:top;background-color:#ffcfbc;" | affected models
! style="vertical-align:top;background-color:#cfefcf;" | unaffected models
|-
| style="vertical-align:top;background-color:#fff0e0;" |
* {{R32}}
** 2658-BQG
* {{R40}}
** 2722-5MG
** 2722-B3G
** 2897-GWU
* {{R50}}
** 1829-7RG
** 1829-6DM
** 1836-3SU
* {{R51}}
** 1829-9MG
** 1829-EHG
** 1830-DG4
** 1836-Q6U
* {{T23}}
**2647-???
* {{T30}}
** 2366-81A
** 2366-97U
*{{T40}}
**2373-MU3
**2373-82U
**2373-92U
**2373-22G
**2373-19G
**2373-A1U
*{{T40p}}
**2373-G1U
**2373-G3U
**2373-G3G
**2373-G1G
**2373-G5G
* {{T41}}
**2379-DJU
**2373-9HU
**2373-4FG
**2373-4PG
**2373-1FG
**2373-2FG
**2373-6U4
**2373-7JU
**2373-CY0
**2373-TG5
* {{T41p}}
**2373-9FU
* {{T42}}
**2373-C19
**2378-DUU
**2373-FWG
**[[2373-6ZG]]
* {{X21}}
| style="vertical-align:top;background-color:#e9f9e9;" |
*[[:Category:R50p | R50p]]
*[[:Category:T41 | T41]]
**2373-GEU
*[[:Category:T41p | T41p]]
**2373-GKG
**2373-GGG
**[[2373-GHG]]
*[[:Category:T42p | T42p]]
**[[2373-HTG]]
**[[2373-W6M]]
**[[2373-GTG]]
**[[2373-GXG]]
**2373-KXM
*[[:Category:T42 | T42]]
**[[2378-FVU]]
**[[2373-WBZ]]
*[[:Category:X40 | X40]]
**2371
*[[:Category:A22m | A22m]]
**2628
|}

==Affected Operating Systems==

*Linux, all flavours.
*Windows, for some models as well (only when using non-IBM drivers).
*FreeBSD (on the A22M)

==Status==
*The cause of the mysterious power drain is the radeon GPU, which requires extra steps to suspend properly. Unfortunately, this fix might break non-Thinkpad machines and therefore is not yet in the official kernel sources.

*The official bugzilla entry for the radeon suspend issue is in the [http://bugme.osdl.org/show_bug.cgi?id=3022 OSDL Bugzilla]. There you can find a patch which will solve the power drain issue.

{{WARN|This solution enables doing suspend-to-D2 on non-PPC-machines, which is not properly documented! Be careful and have a look at the discussion for kernel bug 3022 (see above) before applying the patch. By default, the patch enables the suspend-to-D2 only on machines where it is know to work. This behaviour can be overridden with a module option.}}

*Most certainly, the DSDT is not at fault. (Interesting to note: The DSDT from BIOS 3.13 (Nov 04) for the T42p compiles without bugs.)

*Some additional power savings can be achieved by turning off the wake-on-lan (<tt>ethtool -s eth0 wol d</tt>). The power drain of the wol feature is far smaller than the radeon bug, but can be noticeable.

==Solutions==
===For Thinkpads with Radeon graphic driver===

You must use a patched version of the radeon frame buffer, even if you are only interested in using the X window system. This modified radeon frame buffer then suspends the radeon chip correctly during ACPI sleep. This patch is not yet in the official (kernel.org) kernels.

The patch contains a list of Thinkpads where it is known to work, and by default only activates on these machines. If you think that your computer would profit from the patch as well, you can force it by including the module parameter <tt>radeon_force_sleep=1</tt>.

====Fedora Core 4 official kernel====

Fedora ships a patched radeon frame buffer (radeonfb.ko), but you must enable it yourself. [[:Category:Fedora | Fedora Core 4]] compiles it as a module rather than including it in the kernel, therefore you cannot activate it at boot time. You must arrange for the module to be loaded before X starts (for example, using an init script).

If you want to try the radeon frame buffer, you can enable it as follows (assuming you are at the gdm login screen). First, switch to a console (Ctrl-Alt-F1) and log in as root. Stop X:
init 3
Now you can load the module:
modprobe radeonfb radeon_force_sleep=1
Finally, resume X:
init 5

====Fedora Core 3/4 custom kernel====

For [[:Category:Fedora | Fedora Core]] there are precompiled patched kernels [http://www.sas.upenn.edu/~vbraun/computing/T41/kernel.html available]:

*[http://carrot.hep.upenn.edu/~vbraun/kernel-T4x/i386/kernel-T4x-2.6.11.11-26.i386.rpm linux 2.6.11 for Fedora Core 3]

*[http://carrot.hep.upenn.edu/~vbraun/kernel-T4x/i386/kernel-T4x-2.6.12.2-2.i386.rpm linux 2.6.12 for Fedora Core 4]

These kernels contain additional thinkpad-related patches, including software suspend2 and trackpoint support. Suspend to disk and suspend to ram should work with them. If your Thinkpad model is not yet whitelisted in the patch, you might have to enable the radeon fix by including the parameter <tt>video=radeonfb:radeon_force_sleep=1</tt> on the kernel command line.

If you try, please send the result (hang yes/no, battery drain yes/no) with the precise model number (for example, I have a IBM thinkpad T41 2379-DJU) to <tt>vbraun at physics dot upenn dot edu</tt>, it would be nice if your subject line would include "RADEONFB:" to make sure that I do not miss any emails.

====Technical Discussion====

The proposed solution is to remove the CONFIG_PPC_PMAC condition for enabling D2 sleep in drivers/video/aty/radeon_pm.c as discussed in [http://bugme.osdl.org/show_bug.cgi?id=3022 kernel bug 3022]. There you can also find patches doing this. The patches divide into unconditional ones like [http://carrot.hep.upenn.edu/~vbraun/kernel-T4x/test/patch-2.6.11-rc2-radeonfb-D2.patch.bz2 this one for 2.6.11-rc2] and conditional ones. The conditional ones only do D2 on models where it has been reported to work, the unconditional ones force D2 sleep on every model and you might experience hangs on resume with those.

===For other models without radeon graphics===
Nothing yet.

Madwifi

2005-07-14T06:57:14Z

84.191.148.177:

== Multiband Atheros Driver for WiFi ==
Linux driver for 802.11a/b/g universal NIC cards - Cardbus, PCI, or miniPCI - using Atheros chip sets.

The following adapters sold by IBM use the Atheros chips:
* [[IBM Dual-Band 11a/b Wi-Fi Wireless Mini PCI Adapter]]
* [[IBM 11b/g Wireless LAN Mini PCI Adapter]]
* [[IBM 11a/b/g Wireless LAN Mini PCI Adapter]]
* [[IBM 11a/b/g Wireless LAN Mini PCI Adapter II]]
* IBM 802.11a Wireless LAN Cardbus Adapter
* IBM 11 a/b/g Wireless Cardbus Adapter

=== Project Homepage ===
http://sourceforge.net/projects/madwifi

=== Packages ===
*daily cvs snapshots: http://madwifi.otaku42.de
*[[:Category:Debian | Debian]] Packages: http://www.marlow.dk/site.php/tech/madwifi
*[[:Category:Fedora | Fedora Core]] Packages: http://www.atrpms.net/name/madwifi/

=== CVS ===
cvs -z3 -d:pserver:anonymous@cvs.sourceforge.net:/cvsroot/madwifi \
co madwifi

=== Status ===
in development, usable

=== OpenSource HAL ===
The "official" driver consists of an opensource wrapper with binary HAL (Hardware Abstraction Layer). This HAL is not a binary firmware like with the Intel Wireless chips, but a piece of code that needs to runs in the Linux kernel.
The vendors reasoning behind this is, that since the Atheros chip could be tuned to any frequency, and hence interfere with systems operating in those frequencies, that we simply need to accept this binary module.<br>
Obviously this binary HAL is unacceptable to the Linux kernel developers, and the Atheros driver in this state will never become part of the official kernel.<br>
Some OpenBSD developers facing the same issue, reverse engineered the binary HAL and have produced an OpenSource version. Hopefully a driver based on this might be included with the Linux kernel at some point in time, and picked up by the mainstream distributions.

=== Related links ===
* [http://madwifiwiki.thewebhost.de/wiki/ MadWiFi Wiki]
* [http://team.vantronix.net/ar5k/ OpenSource Atheros HAL]

[[Category:Drivers]] [[Category:Fedora]] [[Category:Debian]]

Hostap

2005-07-14T06:56:40Z

84.191.148.177:

== Prism 2/2.5/3 Driver ==
Linux driver for 802.11a/b/g NIC cards - Cardbus, PCI, or miniPCI - using Prism chipsets.

The following adapters sold by IBM use Prism chipsets:
* [[IBM High Rate Wireless LAN Mini-PCI Adapter with Modem]]
* [[IBM High Rate Wireless LAN Mini-PCI Adapter with Modem II]]
* [[IBM High Rate Wireless LAN Mini-PCI Adapter III]]
* IBM High Rate Wireless LAN PC Card

=== Project Homepage / Availability ===
http://hostap.epitest.fi/

=== Status ===
The driver is considered stable

However, some people have experienced stability issues transfering large files, this driver typically handles such problem better then the [[orinoco]] driver, but still suffers from it.

Some people have suggested that upgrading the firmware will solve the problem.<br>
Have a look [http://linux.junsun.net/intersil-prism/ here] for firmware flash tools and firmware files.

'''WARNING''' IBM will most likely not support these firmware upgrades, if it breaks your hardware it is your problem.

=== Packages ===
* [[:Category:Fedora |Fedora Core]] Packages: http://www.atrpms.net/name/hostap-driver/
* [[:Category:Gentoo|Gentoo]] Packages: http://packages.gentoo.org/search/?sstring=hostap-driver

=== Related links ===

[[Category:Drivers]] [[Category:Fedora]] [[Category:Gentoo]]

Ipw2100

2005-07-14T06:55:38Z

84.191.148.177:

== Intel PRO/Wireless 2100 Driver for WiFi ==
Linux driver for the 802.11b NIC - miniPCI cards - found in Centrino laptops.

The following adapter sold by IBM uses this chipset:
* [[Intel PRO/Wireless LAN 2100 3B Mini PCI Adapter]]

=== Project Homepage / Availability ===
http://ipw2100.sourceforge.net/

=== Packages ===
*[[:Category:Fedora | Fedora Core]] Packages: http://www.atrpms.net/name/ipw2100/
*[[:Category:Mandrake | Mandrake]]: modules included in stock kernel packages

=== Status ===
In development but usable. Version 1.0.5 works quite well with kernel 2.6.10.

=== Additional Comments ===
Make sure to try the newest version. You will need to install the loadable binary firmware provided on http://ipw2100.sourceforge.net/firmware.php as required by the driver.

=== Related links ===
* [http://ipw2100.sourceforge.net/faq.php ipw2100 FAQ]

[[Category:Drivers]] [[Category:Fedora]] [[Category:Mandrake]]

Ipw2200

2005-07-14T06:55:05Z

84.191.148.177:

== Intel PRO/Wireless 2200/2915 Driver for WiFi ==
Linux driver for the 802.11bg and 802.11abg NICs - miniPCI cards - found in Centrino laptops. This driver only works on 2.6.x kernels (2.6.4 or newer).

The following adapters sold by IBM use these chips:
* [[Intel PRO/Wireless 2200BG Mini-PCI Adapter]]
* [[Intel PRO/Wireless 2915ABG Mini-PCI Adapter]]

=== Project Homepage / Availability ===
http://ipw2200.sourceforge.net/

=== Packages ===
*[[:Category:Fedora | Fedora Core]] Packages: http://www.atrpms.net/name/ipw2200/
*[[:Category:Mandrake | Mandrake 10.1]] The ipw2200 driver modules are included in the stock kernel package.
*[[:Category:Gentoo | Gentoo]] The driver is in the portage tree: emerge net-wireless/ipw2200 and net-wireless/ipw2200-firmware

=== Status ===
in development, usable, WEP 128bit encryption works, WPA does also work with drivers >= 1.0.2 (beta at the moment, use wpa_supplicant for WPA-functionality), Monitor/RFMon is supported as of 1.0.4 and firmware 2.3!

Current Version: 1.0.4

Firmware Version : 2.3

Works fine!

Currently (8/Jul/2005), select developer-patched 2.6.12 Kernels (notably, -mm) and all Kernel 2.6.13 release candidates do not work with the current version of the driver (1.0.4). Compilation breaks due to an incompatible header file. Simply copying over the header file from older kernels will make the compilation work but the driver will be seriously broken - thus this is not recommended. The ipw2200 developers are working on the problem.

=== Additional Comments ===
make sure you grab the newest version and new loadable firmware as required by the driver

[[Category:Drivers]] [[Category:Fedora]]