• 0 Posts
  • 15 Comments
Joined 2 years ago
cake
Cake day: June 29th, 2023

help-circle



  • This is basically the same argument that caused the libreboot vs gnuboot thing and I just personally don’t get it. It seems to me like the FSF is letting perfect be the enemy of the good. Having a FOSS driver isn’t something to be celebrated it’s something to be punished if the firmware isn’t also FOSS. Yes, ofc, FOSS firmware is better than closed firmware, but when almost no modern hardware has that as an option, it’s not even something you can really vote on with your wallet unless you just run ancient hardware all the time.

    It matters because for me, a good chunk of the FOSS benefit is the auditability of code. Being able to make changes is nice and that’s the freedom bit, but being able to audit it is also a huge benefit. If the code is not running on the main CPU then the driver on the main CPU can contain possible exploits of firmware using the IOMMU etc so it becomes more tolerable than a closed source driver. Basically a firmware vulnerability effectively becomes a hardware vulnerability as opposed to a driver running with full kernel privileges and no oversight or containment.


  • Apologies, when I said free hardware I meant design as well as somewhat blending the term with free firmware. But either way the difference they draw isn’t really all that different when you think about it. It’s sort of irrelevant whether or not the firmware can be easily updated, what really matters is where the firmware is being executed. If it’s running on the device then it can be isolated by the host system, if it’s running on the host then it’s not really firmware but rather part of the driver. The semantics don’t change just because the firmware is “easily updatable.” Having it be uploaded by the driver provides security benefits in that it can be patched by the manufacturer after the fact and having firmware in ROM which can’t be patched doesn’t guarantee it’s more secure or even less complex in design. I guess I just see it as a somewhat arbitrary line and I personally don’t agree with it


  • To be clear, I’m not saying I don’t want open hardware, what I’m saying is I don’t get the point of allowing closed hardware that doesn’t require a firmware blob as opposed to closed hardware that does. That’s a very arbitrary and silly line that does nothing useful. They’re going on this crusade of “no blobs.” But why? There’s lots of hardware that already has closed blobs on the HW, but because it’s not uploaded by the driver those blobs are ok? You either have to say all closed firmware is bad and we’re going to take a stance against any devices which have any amount of closed firmware, even when shipped on ROM in the HW. Or, closed firmware is tolerable so long as the driver is fully FOSS. I love the idea of not having closed firmware but I just don’t get the intellectual inconsistency here.