News for hackers. Stuff that matters.

A comment on A cryptographically secure bootloader for RISC-V in Rust. Parent comment

Re:A cryptographically secure bootloader for RISC-V in Rust by mixmastamyk on Monday August 05, 2024 @12:41PM (#41162938)
You’re comparing a trillion dollar (of value) product to a thousand dollar one, and then implying the second is failing due to a technical issue.

Pine drops hardware and lets other folks do the software work.

[ Parent | on HN ]
Re:A cryptographically secure bootloader for RISC-V in Rust by yjftsjthsd-h on Monday August 05, 2024 @01:20PM (#41163314)
To be quite fair, I think the pinephone is technically inferior in some ways; having a TPM and secure boot would let you make the device safer than is currently possible. But that's orthogonal to it being a walled garden; if users could run arbitrary apps downloaded off the internet, iPhones would still be safer, and if the next pinephone includes a TPM and user-controlled secure boot, it would have most of the same security properties while still being completely under the user's control.
[ Parent | on HN ]
Re:A cryptographically secure bootloader for RISC-V in Rust by Arnavion on Monday August 05, 2024 @07:39PM (#41166588)
PinePhone SoC (Allwinner A64) does have the hardware needed for verifying boot via TBBR. It's just that no person or distro uses it for that because the key can only be written once. Also IIRC it's vulnerable to bus snooping.
[ Parent | on HN ]
Re:A cryptographically secure bootloader for RISC-V in Rust by scintill76 on Monday August 05, 2024 @01:06PM (#41163185)
> > PinePhone doesn’t even have secure boot

If GP is correct about that, software won’t fix that limitation in PinePhone hardware. I expect the lack of a secure enclave is a similar story.

[ Parent | on HN ]
Re:A cryptographically secure bootloader for RISC-V in Rust by 0x457 on Monday August 05, 2024 @01:02PM (#41163159)
To a customer, it's irrelevant.
[ Parent | on HN ]