News for hackers. Stuff that matters.

A comment on I Love Arch, but GNU Guix Is My New Distro. Parent comment

Re:I Love Arch, but GNU Guix Is My New Distro by pdpi on Saturday November 20, 2021 @09:55AM (#29288589)
> If you update your CPU microcode to something that can't be checked, you're already sacrificing security.

You're not sacrificing security, you're making a tradeoff.

If I update my CPU microcode to something I can't check myself, I'm explicitly choosing to trust my CPU provider, under the assumption that the risk of a microcode-based attack from my CPU provider is smaller than the risk of a cpu bug-based attack by an unknown attacker.

[ Parent | on HN ]
Re:I Love Arch, but GNU Guix Is My New Distro by Qwertious on Sunday November 21, 2021 @03:02AM (#29294866)
>You're not sacrificing security, you're making a tradeoff.

If you don't trust your CPU provider then you have zero security from them already. Even if the entire design of the CPU is open-source. https://www.bunniestudios.com/blog/?p=5706

[ Parent | on HN ]