Re:I Love Arch, but GNU Guix Is My New Distro
by marcan_42 on Saturday November 20, 2021 @07:00AM
(#29287336)
Those people are already running arbitrary binary code without the possibility to check what's inside, it's just that it was loaded before purchase. If you don't trust Intel's updates, then you also can't trust their CPUs in the first place.
[ Parent
| on HN ]
Re:I Love Arch, but GNU Guix Is My New Distro
by Santosh83 on Saturday November 20, 2021 @07:17AM
(#29287439)
There is a bit more nuance here though. There may be users who trust their old systems but no longer trust the current state of its manufacturer or their binary only updates. Proprietary blobs go against the core freedom as defined by FSF so I can understand why they block by default but IMO they should allow informed users to override. Simply censoring without allowing a user to bypass is not user (or freedom) respecting. The power to choose should be with the user, whom the FSF claims to represent.
Re:I Love Arch, but GNU Guix Is My New Distro
by ajvs on Saturday November 20, 2021 @07:30AM
(#29287513)
Just because some proprietary code exists doesn't mean you should leave the door open for them to add as much extra proprietary code as they wish.
You can regard it as two separate features: one that's needed for the CPU to function, and another that's the door for more code being added. In that perspective it's better to go with preventing additions.
Re:I Love Arch, but GNU Guix Is My New Distro
by marcan_42 on Saturday November 20, 2021 @01:14PM
(#29290418)
You can't add much to a CPU via microcode. The space of what updates can do is extremely limited, with a limited amount of patch RAM and patch registers. It's designed to fix bugs. You're arguing against fixing bugs in proprietary software you're already running.
Re:I Love Arch, but GNU Guix Is My New Distro
by marcodiego on Saturday November 20, 2021 @01:21PM
(#29290487)
So why don't CPU vendor open source their microcode? Secrets... ok, let's use the ones which have no secrets.
Re:I Love Arch, but GNU Guix Is My New Distro
by marcan_42 on Saturday November 20, 2021 @01:42PM
(#29290681)
Good luck with that...
Re:I Love Arch, but GNU Guix Is My New Distro
by georgyo on Saturday November 20, 2021 @07:36AM
(#29287548)
This is a double edge sword.
If there are issues with what are initially released and you do not patch you do not get those fixes.
So they could add stuff but they definitely will fix stuff. Not updating could be more dangerous then updating.
Re:I Love Arch, but GNU Guix Is My New Distro
by javert on Saturday November 20, 2021 @12:26PM
(#29289996)
Intel hardware definitely cannot be trusted. Probably "good enough" for most people, but it's honestly garbage, security wise.
Re:I Love Arch, but GNU Guix Is My New Distro
by marcan_42 on Saturday November 20, 2021 @01:44PM
(#29290697)
And yet that terrible security situation has approximately nothing to do with the FSF's "no visible blobs" rule. ME could be just as bad running off of ROM, and then it'd meet the FSF's "Respects your Freedom" requirements.