GNU+Linux laptops with Libreboot preinstalled, based on coreboot

Re:GNU+Linux laptops with Libreboot preinstalled, based on c... by anonym29 on Sunday April 09, 2023 @07:02PM (#35507322)

It's not that RISC-V guarantees truly transparent firmware and microcode; as you correctly point out, it does not.

What RISC-V offers is the possibility of truly transparent firmware and microcode. This comes as a refreshing alternative to x86, which guarantees that firmware and microcode, including those of security coprocessors (e.g. Intel CSME & AMD ST, formerly ME and PSP) will not be transparent.

[ Parent | on HN ]

Re:GNU+Linux laptops with Libreboot preinstalled, based on c... by wmf on Monday April 10, 2023 @12:41AM (#35509240)

ARM offers the same possibility but there's like one SoC that's fully transparent.

[ Parent | on HN ]

Re:GNU+Linux laptops with Libreboot preinstalled, based on c... by anonym29 on Monday April 10, 2023 @09:19AM (#35511923)

I am not as well-versed in the specifics of ARM's TrustZone as I am with Intel CSME and AMD ST, but I understand many of the people uncomfortable with the latter two are uncomfortable with the former as well. I do not believe it comes with the same capabilities as CSME or ST (PSP), but I do know that earlier versions of PSP were implemented using an ARM TrustZone core. That said, I need to do a lot more reading and research on it before forming more substantial positions on it.

[ Parent | on HN ]

Re:GNU+Linux laptops with Libreboot preinstalled, based on c... by wmf on Monday April 10, 2023 @04:34PM (#35517067)

AFAIK you can build an ARM SoC without TrustZone (or without using TrustZone for anything) if you want.

[ Parent | on HN ]

Re:GNU+Linux laptops with Libreboot preinstalled, based on c... by 7to2 on Tuesday April 11, 2023 @06:52AM (#35523310)

ARM offers the same possibility.. in exchange for a fee and a stack of NDAs. Competition and openness is how we should deal with this disease.

[ Parent | on HN ]