Question ThinkPad - Destroying All Memory Through CPU Pipeline(OS <=> Firmware)

[BreadboardGoblinMode]

Hi there folks,

First of all beforehand I want to give my thanks to if anyone sees this and responds, and please excuse me if my question format is not with the general standard,
I'm a first timer here and I don't really have much experience with posting questions on public forums. I would very much appereciate any advice on this problem I got.

So long story short, I am a Lenovo Thinkpad enthusiast, I really like these machines, got a couple of Thinkpads I use daily, being a student most of my studies depend on these machines,and now the memory integritiy of my devices are in violation "at least" on the bootloader privilage level. I rather not go into more detail here, I told this to establish a ground for the problem definition, however I will say that if anyone would asks specific further detail is of importance in a potential solution to this problem, I would gladly be okay to share my findings via PGP encrypted text through any private text communication medium of their choice.

Now the everything in this machines gotta go, I don't mean a factory reset,
or recovery or Novo button kind of options, What I mean I never had the need of destroying the contained data on every single permission ring throughout the cpu pipeline I could try with asm and I am not unfamiliar with aes-ni usage, which would help me to encrypt faster when I don't care about the entropy or secure key expansion, but then I would also need an allocator to free the occupied slots, but this breach is not only effecting a single laptop, using different OSes, different drive devices, this would be my whole summer project at the end. The factory reset option I need here is to be heavily encrypting the whole memmory hiearchy through everything between both ends of the cpu pipeline, and deletion or whatever we may call it would need a parallel C++ execution thread passing data to a virtual stack to overwrite memmory slot index" n " with index (n-1) constantly to induce information loss, kinda like the weird garbage collection of JavaScript I guess 😀 not completely sure right now though.

I would very very much appreciate if someone knows an alternative solution to this and tells me, it would really mean a lot. Thank you folks . Sorry for the temporary brainrot I may have caused. Sorry for any possible typing mistakes, this stuff makes me loose sleep man. Thank you all, love and peace... EDIT: I only edited the weird emojis that appeared suddenly after I posted, nothing else.

 

[COLGeek]

How many systems are you talking about? Basically, it sounds like you simply want to completely wipe all of these systems. Is that correct?

 

[Ralston18]

Bottom line being:

"Now the everything in this machines gotta go," - correct?

And "but this breach is not only effecting a single laptop, using different OSes, different drive devices"

Just the data - not the hardware - correct?

The requirement being basically a full and complete erasure of all data wherever it could be stored or held - correct?

 

[BreadboardGoblinMode]

Hi thank you, yes, it is basically a compromised local network, one of the culprits here is avahi-daemon running on escalated privilages, I need to wipe everything, other smart devices effected are different, already took care, deciding to use OpenWRT on router was a stepstone. To do a secure erase first I need encrypt the data that I will later erase, but doing this on the whole software architecture is not easy, I would need to to create a copy of virtual memmory binded to the hardware ruleset before altering the rom, flash memmory or epprom, other wise it will clash. I don't want to try new ways to break my stuff even more, so I am in search of alternative ways than manually getting into it.

 

[BreadboardGoblinMode]

Bottom line being:

"Now the everything in this machines gotta go," - correct?

And "but this breach is not only effecting a single laptop, using different OSes, different drive devices"

Just the data - not the hardware - correct?

The requirement being basically a full and complete erasure of all data wherever it could be stored or held - correct?

Yes, thank you, but a full and secure erase in this context here is a little different than getting the recovery tool on a usb from lenovo and just booting on Windows, this need systematically making all memmory irrecorevable and then flashing them one by one just like new from the factory. Guys persistent memory corruption gets worse and worse nearing the hardware, freaking LUKS encryption did not work on encrypted disk partitions with escalated privilages, even as root for me they were read only, it took me a lot of tries to eventually unmount all the partitions, then I did ATA enhanced secure erase, but this makes little difference, I dumped the binary of bootloader error logs on terminal, my Secure Boot Keys were corrupted, there is no way to fix this without fully annihilating all memmory and flashing the build in correct sequence after

 

[Ralston18]

As I understand your requirements you need really deep overwrites of memory and storage.

Not clear to me about the attempts to make data irrecoverable and then being concerned about corrupted Secure Boot Keys. Seems moot.

And (full disclosure) I am not a security expert with the necessary knowledge of how to go about making any stored data (RAM or drive) completely irrecoverable.

However, I do know that it is very unlikely that you have any data of sufficient importance that anyone would go to much effort to get that data.

A few overwrites via any number of tools should do the job.

Otherwise the only solution would be to feed the systems into a real metal shredding machine and then meltdown the shreds.

Beyond that I will defer to the security experts.