News for hackers. Stuff that matters.

A comment on BeagleV-Ahead open-source RISC-V single board computer. Parent comment

Re:BeagleV-Ahead open-source RISC-V single board computer by yjftsjthsd-h on Sunday October 15, 2023 @08:35AM (#37889236)
> The isolation provided by the kennel is strictly more vulnerable than a TPM chip that can only interacted with via a communication protocol.

That's a useful property, but you have to weigh it against a kernel that can be audited and patched.

[ Parent | on HN ]
Re:BeagleV-Ahead open-source RISC-V single board computer by samus on Sunday October 15, 2023 @12:55PM (#37891363)
Whether the kernel can vbe audited is completely orthogonal to verifying it at boot time since there are still ways to retrieve it even with active hardware encryption.

The utility of patching your own kernel has to be carefully weighted against the security impact of doing so. If an attacker can take over the user account that compiles the kernel, they can make you install a compromised kernel. For example, by running a file system monitor that exchanges the kernel image with a compromised one as soon as it has been built.

[ Parent | on HN ]