News for hackers. Stuff that matters.

A comment on System76 ME Firmware Updates Plan. Parent comment

Re:System76 ME Firmware Updates Plan by yjftsjthsd-h on Thursday November 30, 2017 @09:04PM (#15821379)
Well... yeah? They're the OS vendor; there is literally no way for them to do their job without having the ability to update the system.
[ Parent | on HN ]
Re:System76 ME Firmware Updates Plan by mulmen on Thursday November 30, 2017 @09:53PM (#15821550)
Yes they have to be able to update the system but in this case they are also able to update the firmware without asking which means anyone who can impersonate or coerce them can also update the firmware.
[ Parent | on HN ]
Re:System76 ME Firmware Updates Plan by ibotty on Friday December 01, 2017 @01:55AM (#15822415)
If you control the OS, you also control the firmware (if you want a way to install new firmware from the OS). No way around.
[ Parent | on HN ]