Re:Libreboot is not GNU Libreboot anymore
by tzs on Saturday September 17, 2016 @03:28PM
(#12522006)
> For example, their FAQ states this:
>> It is extremely unlikely that any post-2008 Intel hardware will ever be supported in libreboot, due to severe security and freedom issues; so severe, that the libreboot project recommends avoiding all modern Intel hardware. If you have an Intel based system affected by the problems described below, then you should get rid of it as soon as possible.
> That's some of the most unprofessional editorializing I've seen from a software project.
How is that unprofessional? Recent Intel hardware does contain binary blobs that you cannot disable and that have full system access, which does raise both security and freedom issues.
>> In summary, the Intel Management Engine and its applications are a backdoor with total access to and control over the rest of the PC. The ME is a threat to freedom, security, and privacy, and the libreboot project strongly recommends avoiding it entirely. Since recent versions of it can't be removed, this means avoiding all recent generations of Intel hardware.
> The Management Engine is, by the way, intended to help large enterprises automate administration of PCs on their network. Calling it malicious is intellectually dishonest.
I didn't see them call it malicious in their FAQ. Yes, it's purpose is to provide a backdoor for legitimate owners of the computers to administer them. That something has a legitimate use that does not threaten freedom, security, and privacy doesn't mean that there is no risk that someone will find an illegitimate way to use it.
What it comes down to is that they value having only free software on their systems, and you cannot do that on recent Intel hardware. Hence, they recommend avoiding said hardware.
>> It is extremely unlikely that any post-2008 Intel hardware will ever be supported in libreboot, due to severe security and freedom issues; so severe, that the libreboot project recommends avoiding all modern Intel hardware. If you have an Intel based system affected by the problems described below, then you should get rid of it as soon as possible.
> That's some of the most unprofessional editorializing I've seen from a software project.
How is that unprofessional? Recent Intel hardware does contain binary blobs that you cannot disable and that have full system access, which does raise both security and freedom issues.
>> In summary, the Intel Management Engine and its applications are a backdoor with total access to and control over the rest of the PC. The ME is a threat to freedom, security, and privacy, and the libreboot project strongly recommends avoiding it entirely. Since recent versions of it can't be removed, this means avoiding all recent generations of Intel hardware.
> The Management Engine is, by the way, intended to help large enterprises automate administration of PCs on their network. Calling it malicious is intellectually dishonest.
I didn't see them call it malicious in their FAQ. Yes, it's purpose is to provide a backdoor for legitimate owners of the computers to administer them. That something has a legitimate use that does not threaten freedom, security, and privacy doesn't mean that there is no risk that someone will find an illegitimate way to use it.
What it comes down to is that they value having only free software on their systems, and you cannot do that on recent Intel hardware. Hence, they recommend avoiding said hardware.