News for hackers. Stuff that matters.

A comment on Ask HN: I’m an FCC Commissioner proposing regulation of IoT security updates. Parent comment

Re:Ask HN: I’m an FCC Commissioner proposing regulation of I... by landemva on Tuesday September 05, 2023 @07:27PM (#37399219)
Why doesn't MS do similar on all of their OS code by placing it on a read-only filesystem? Only allow updates when reboot into an update mode.
[ Parent | on HN ]
Re:Ask HN: I’m an FCC Commissioner proposing regulation of I... by WalterBright on Tuesday September 05, 2023 @10:43PM (#37400787)
I have zero faith in software read-only modes.
[ Parent | on HN ]
Re:Ask HN: I’m an FCC Commissioner proposing regulation of I... by Too on Tuesday September 05, 2023 @11:51PM (#37401153)
Android does this. OS is read only. Updates happen on second partition and takes effect by swapping partition on reboot. Integrity is verified by secure boot.
[ Parent | on HN ]
Re:Ask HN: I’m an FCC Commissioner proposing regulation of I... by landemva on Tuesday September 05, 2023 @11:59PM (#37401199)
Interesting. How is it verified? Maybe keep Merkle tree hash of eveything in TPM?
[ Parent | on HN ]