I am not sure, if the old battery charging bug still affects current versions, or when in the Windows update process this is checked, if it applies there at all.
At least on older versions, they had the problem, that the EC determined having a power supply as charging the battery right this moment.
So to reliably register a plugged in power supply it needed to be below 90% battery, so it would definitely be charging and not currently be in a discharge cycle to prolong battery life:
FWIW, I’m generally in the same camp. As far as I’m concerned, if a person with malicious intent has your machine, there’s only so much you can do, right?
However, there are also those of us patiently waiting for these updates because they’ll bring additional functionality or stability (namely for me, the larger battery support). This is directly influencing a purchase decision for me. I’m just not willing to risk my machine or put more money down on what is essentially a beta.
I can only offer that additional perspective personally, but I wouldn’t begrudge anyone for wanting security updates as a priority either.
For many, this is also directly tied in with Framework’s stated mission. Part of repairable hardware is longevity. If we’re gonna have this hardware awhile (as we hope), it should have support for as long as is reasonable (and comparable to other manufacturers).
How we all use our devices varies and the needs are different. It doesn’t let them off the hook.
Like many I hope they do better. Hopefully they will.
I’d agree most people don’t need most bios vulnerabilities patched same-day or even same-week. I think the industry standard of 90 days reflects that reality.
However, being a year and a half out of date should worry most people. The fact that most people don’t pay much attention to their security is a big part of what makes this whole thing so bad; the average user doesn’t even know they’re vulnerable. And normal people aside, these devices are being marketed to businesses too.
I think this thread is already pretty down to earth. People are calling it bad because yeah, it is actually just bad. For many of us, an insecure device really is a paperweight and that’s the crappy truth of it.
I’d like a fix for the issue where, under vaguely moderate load, my laptop will throttle all CPU cores down to 400MHz and hold them there for 5-15 minutes, even though core temperatures are well below the danger zone within seconds of throttling. Since this happens on multiple OSes, I’ve seen it on two different mainboards, and others have experienced it as well, this is most likely a firmware issue (possibly the EC, though, and maybe not the UEFI bits).
If 3.08 (well, 3.06) had gotten the attention it needed over a year ago, I would hope that it would have been released long ago, and Framework could have been working on serious bugs like mine, rather than… whatever it is they’ve been doing.
My 12th gen had the issue where all cores would throttle down to 400MHz. Ultimately, I had to open the laptop and reapply the thermal paste on the cpu. Not ideal, but my CPU hasn’t been locked at 400 MHz since then.
Tried it, twice, on two different boards, didn’t help. (I’ve been having an intermittent back and forth with Framework support for quite a long time now… believe me when I say we’ve tried a lot of things.)
May I ask what thermal paste brand/model you used? Maybe that’s significant…
Edit: er, after posting I realize this is super OT for this thread. Sorry, y’all. @BigBoat, feel free to DM me or reply over on my thread about this.
My partner uses my old 12th gen i5 board. Just installed the the 3.08 update via the tool on Framework’s site. Completed without a hitch, and the system reports the bios as now being 3.08, it had come from the 3.05 beta previously.
EDIT: To clarify, my partner is running Windows 11.
I am sorry but I am going to join the chorus of people here and say that I’m deeply saddened by this state of affairs.
I’m one of the early adopters of the 3.06 beta BIOS update. I installed it, from Linux, and it worked, it was great. I was expecting this to come out of beta months ago. Now there’s a 3.08b available, and not only is it not available on LVFS/Linux, even the EFI option has been pulled.
Now, it seems the framework team has moved on to other things, and I’m left holding the bag, with a basically backdoored BIOS.
This is, quite plainly, unacceptable. I’ve been recommending Framework left and right, thinking you folks had our backs, but now it seems we (the free software community) are left holding the bag and will have to reverse engineer your stuff to get updates delivered properly.
For me, this clearly shows that Linux is a second-class citizen for Framework. This would never happen to the Windows or Chrome sides of the business. Can you imagine Framework coming out “oh yeah, poor windows users sorry you’ll have to boot a Linux OS to install that update?” Nevermind than that would actually be possible for windows users: Live linux distributions are actually a thing, and quite popular tools even for windows users to recover their mess.
In fact, why isn’t this the way updates are delivered? Linux is easy to embed in a thumb drive to deliver updates…
Anyways, having some word about a timeline on Linux support for the BIOS from the framework team would be much appreciated here. Maybe @Matt_Hartley knows?
This is the MSI installer only being “updated”. supposedly the firmware itself did not.
the EFI updater is still on the server. I can only agree on the bios should become release at some point. (and when to expect this “stable” efi variant, altho the efi version worked fine for me)
@Ray519 At this point with 3.08b released on the update page, the only major tripping point (aside from the lack of information during updates, no detailed info for aborted updates, etc.) is the ReTimer updates, correct? And that can be resolved by disconnecting the battery in BIOS for a few minutes and powering back on, right? So at this time we should be ok to run the update, assuming we’re ok with potentially needing to disconnect the battery in BIOS? Or was there something bad about the GOP driver that’s still worth holding off for?
From a stability point of view of the update once installed, I am aware of nothing. I concluded as much in February when I installed the beta on my mothers Framework assuming that Framework would be dragging their feet again (and after skipping the 3.06 beta, because that had issues with the USB legacy adapters).
The GOP thing and many other things I have commented since April are just about the way they describe or not describe things (like listing 2 different versions as same in the release notes, and in 3 months and for a release not having noticed this contradiction. So nothing directly about the quality of the update itself.
My main concern has long more been the way it has been handled. How if Framework had been getting private reports or I would have missed a user reporting another issue of the update here, they might have ignored them just the same as the other reports here. And what that says about FWs processes and ability to deliver updates and us being able to trust their PR-driven “opinion” that the update is ready. Especially if they intend to just ramp up speed without showing that they are making vast changes to prevent releasing the WRONG version ever again (and not noticing for months).
I think 3.08 itself, is probably of the same or higher quality as the factory version. And there is no solid testing, so there are probably still rare issues in there. But I don’t think the chance of that is higher than such issues being in the factory firmware from the same people or you hitting some of the known issues that are fixed with 3.08. And I do not see the quality and reliableness of the updates improving in the short term, so think 3.08 is still the better way to go.
Excellent, I appreciate the info! It’s funny, across here, Reddit, and the Ars Technica article comments, you’ve been the one keeping level-headed and providing good, solid info. I really appreciate that.
I try to keep the anger down when writing things and remain fair and also acknowledge positive developments etc. In the hopes of getting Framework to change their stance and rethink things. And getting me the products I would like to have. Although I have been getting a bit more snarky over time.
Maybe we get lucky and the same or other authors actually pick up on the 3.08b release situation and how FW is again trying to keep that quiet.
Maybe that gets us even more transparency and hope for the future.
However, now with Linux, entering “deep” suspend (in the /sys/power/mem_sleep sense) consistently soft bricks the device. Once in this state, a mainboard reset is required.
Funny because I updated the bios last week to 3.06beta, and the issue you report is exactly what lead me to this thread. The poweroff is not working either.
I’ll contact support. My 2 rear USB ports are dead (except for charging) and this suspend issue are a blocker for me.
OK, I tried the update to 3.08, and it completely broke my motherboard. The 4 usb ports are not visible even in the BIOS (boot selector) anymore. Contacting support.
Sorry to stumble upon the flowers on the carpet, as we say in french, but did you really mean the 12th gen 3.19 update? I thought that was 3.08?
Also, you seem to be saying we can test the update now, is there an actual way to do the 3.08 upgrade now on Linux? (And no, install windows is not a way.)
Also, it seems relevant to mention there was a whole blog post about this very topic on the website now:
I found it’s pretty thin on actual contents. The only new thing in there is:
for Linux we’re developing a new updater to handle the specific firmware regions involved.
which, quite frankly, is actually pretty disappointing. I did the 3.06b update on Debian Linux through LVFS and it Just Worked. I understand this update is trickier, but I find it regrettable that we’re building a whole new way to update firmware instead of leveraging what the community has been working really hard on for years at this point, and that has been adopted by many large, much more commercial/proprietary vendors than Framework, including Dell, HP, Lenovo…
Really, I would love to hear more about what the actual problem is with LVFS and whether or not the LVFS people have to say about this… This really sounds an awful lot like what Purism and System76 ended up with, which is that they’ve basically given up on LVFS. I didn’t buy it from them, and I don’t buy it from Framework either.
not to go far off topic here, but yeah, americans do love it, and seem to have rarely heard it. It’s pretty colloquial (in french!) where I’m from, but maybe not in France…