Dodoid's Computing Freedom Table

Shown configurations are the most-free currently attainable on each model and may not reflect that model's configuration as-sold.

Legend:
FreeProprietaryMixed Free and ProprietaryProprietary, but fully disableableProprietary, but partial info/RE work availableUnknownUndefinedNone or N/A - feature/system not present

Lenovo ThinkPad T410

laptop/lenovo/t410 (platform)

Property Description
Manufacturer
Lenovo
Model
ThinkPad T410
Year
2010
Max CPU
Intel Core i7-640M
Max RAM
8GB
2x4GB DDR3-1066 SODIMM
Image
Intel Logo, credit Intel (https://logodownload.org/wp-content/uploads/2014/04/intel-logo-1-1.png)
Software: User-Facing Environment
Free
Software: Operating System
Free
Software: Bootloader/Recovery
Free
Firmware: Persistent Privileged Code (e.g. x86 SMM)
Free (Coreboot)
Firmware: Late Boot/Payload
Free (SeaBIOS, etc.)
Firmware: Platform Initialization
Free (Coreboot)
Firmware: Memory Initialization
Free (Coreboot)
Firmware: Early Boot (incl. RoT)
Free (Coreboot)
Firmware: Boot ROM
None
x86 CPUs don't have true "software" boot ROMs in mask ROM (such as those in many ARM SoCs). Most x86 platforms map the firmware in SPI flash directly into address space at the reset vector, where it can be executed in-place. Prior to this, some early initialization may be performed by the ROM microcode, or by coprocessors (such as the ME/PSP) if present.
Firmware Signing
ME only, theoretically defeatable
ME Gen2 is reportedly also vulnerable to CVE-2017-5705, which has been used on ME Gen3 to defeat Boot Guard. However, Deguard does not currently support ME Gen2, and no other practical application for CVE-2017-5705 is currently known.
CPU Microcode
Proprietary
All current x86 CPUs use proprietary microcode, stored in mask ROM in the CPU itself. Additional updates to this microcode can be temporarily loaded by firmware and/or the OS.
Management Coprocessor: Firmware
Proprietary, mostly disabled (ME Gen2)
On ME versions between 5 and 11 (Nehalem to Broadwell), sometimes called "ME Generation 2", nearly the entire ME image can be removed, leaving only two modules - ROMP and BUP - totaling 90 kB out of a normal 1.5 - 5 MB. With these modules removed, the ME remains in its BUP state and does not execute its kernel or normal ME functions, leaving it effectively disabled. The AltMeDisable ("HAP") bit can also be used on these MEs.
Communications Coprocessor: Internal Firmware
WLAN proprietary, but card is removable
Communications Coprocessor: Host-Loaded Firmware
Unnecessary with some cards (e.g. ath9k)
Security Coprocessor: Firmware
Proprietary, but use of it is optional (TPM)
Embedded Controller: Firmware
Proprietary
Hardware: Board Electrical Schematic
Proprietary, but often available online
Hardware: Board PCB Design
Proprietary, but boardview often available
Hardware: CPU Instruction Set
Proprietary (x86_64)
Hardware: CPU/SoC Implementation
Proprietary (Intel Arrandale)
Hardware: CPU/SoC Synthesis Toolchain
Proprietary

Back to Table

This page uses 6 DCFT templates:


This page was generated at 00:22 UTC, Nov 24 2025, and reflects DCFT's data at that time.
Have a suggestion or correction? Contact @dodoid:dodoid.com on Matrix.

Developed by Dodoid for the 15h.org community. Source