Re:I Love Arch, but GNU Guix Is My New Distro
by jrm4 on Saturday November 20, 2021 @09:33AM
(#29288398)
Your theory makes sense, but practice strikes me as the reverse: Long-term: Stuff in ROM is significantly easier to track because it happens slower, mostly by large trackable entities and processes. Stuff in RAM? Always changing and "under attack" all the time.
[ Parent
| on HN ]
Re:I Love Arch, but GNU Guix Is My New Distro
by mindslight on Saturday November 20, 2021 @11:15AM
(#29289327)
Firmware in RAM is loaded from distribution packages, which also goes through a trackable process. There is a continuum here with frequent firmware updates being extremely dodgy (why can't they get it right and release a stable version), and infrequent updates (eg CPU microcode) being similar to shipping one image in "ROM".
Furthermore, I haven't seen any device that actually ships significant (ie non-bootloader) firmware in "ROM". It's usually in flash, meaning its contents are mutable but less legible to the Free system than if they were loaded every time by a Free driver.
Re:I Love Arch, but GNU Guix Is My New Distro
by mastax on Saturday November 20, 2021 @02:24PM
(#29291032)
> Stuff in ROM is significantly easier to track because it happens slower, mostly by large trackable entities and processes.
Assuming you're able to track it at all. If the hardware does not provide any way to read the blobs, then how do you track anything? Decap your CPU and stick it under an electron microscope? Much easier to inspect a file on my filesystem.