Thinking of buying a second hand Elite Desk small factor to throw Linux on. I’m worried about the HP firmware-bios thingy. Does it call home? Can I disable calling home somehow? Can it have access to my hard drive info ?

  • Dehydrated@lemmy.world
    link
    fedilink
    arrow-up
    5
    ·
    10 months ago

    The UEFI firmware shouldn’t connect to the internet at all. You can’t rule it out entirely, but the threat is pretty small. Theoretically, it can access your hard drives, but again, it’s very unlikely that your BIOS will exfiltrate your data and send it somewhere. If you want to be sure, use LUKS for full disk encryption.

  • bbbhltz@beehaw.org
    link
    fedilink
    arrow-up
    2
    ·
    10 months ago

    This sounds like a privacy concern. Maybe one of the privacy communities will have a better answer.

    You’re worried that the bios will ping hp and hand over info, is this something that you have info on?

  • TCB13@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    10 months ago

    Those machines are very, very good to run Linux. Stable, everything is supported out of the most, very reliable. About calling home, they don’t, however some models, like most machines, have Intel ME baked into the CPU and that can be remotely accessed. The good thing is that you can disable the Intel ME features on the UEFI and there’s a toggle to completely disable the network card before an OS is loaded.

    • WeAreAllOne@lemm.eeOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      10 months ago

      When any pc starts, isn’t there the boot up menu etc? I’m referring to that. In that menus there are options of remote access or firmware updates etc apart of course the usual setup options like in what turn the boots take place eg HDD, network, dvdrom , USB and others like time, date etc.

      Intel ME is one concern yes but I doubt I can flash corevoot on this machine as it is almost 2 years old.

  • terminhell@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    1
    ·
    10 months ago

    Depends on the model. While some offer bios updates over ip, not all do. That would really be the only thing talking out.