xavier666@lemmy.umucat.day to Linux@lemmy.mlEnglish · 3 days agoBombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices - Eclypsium | Supply Chain Security for the Modern Enterpriseeclypsium.comexternal-linkmessage-square44fedilinkarrow-up1135arrow-down139cross-posted to: linux@programming.dev
arrow-up196arrow-down1external-linkBombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices - Eclypsium | Supply Chain Security for the Modern Enterpriseeclypsium.comxavier666@lemmy.umucat.day to Linux@lemmy.mlEnglish · 3 days agomessage-square44fedilinkcross-posted to: linux@programming.dev
minus-squareHiddenLayer555@lemmy.mllinkfedilinkEnglisharrow-up26·3 days agoWait until you hear about the proprietary microcode backdoors in Intel and AMD processors.
minus-squaresocsa@piefed.sociallinkfedilinkEnglisharrow-up17·2 days agoMy threat profile involves not being important enough to have zero day microcode backdoors wasted on me.
minus-squareeldavi@lemmy.mllinkfedilinkEnglisharrow-up7arrow-down1·3 days agothis is one of the reasons why i’ve only purchased systemd w libre/coreboot i’m aware that it doesn’t completely mitigate it; but it’s the only viable step in the right direction of choices that we’re allowed to have. i sometimes wish i could go back to buying american, but the likes of system76 have already made their allegiances clear.
minus-squareMonkeMischief@lemmy.todaylinkfedilinkarrow-up13·2 days ago the likes of system76 have already made their allegiances clear. Aw crap. What did they do? :( Been somewhat out of the loop lately.
Wait until you hear about the proprietary microcode backdoors in Intel and AMD processors.
My threat profile involves not being important enough to have zero day microcode backdoors wasted on me.
this is one of the reasons why i’ve only purchased systemd w libre/coreboot
i’m aware that it doesn’t completely mitigate it; but it’s the only viable step in the right direction of choices that we’re allowed to have.
i sometimes wish i could go back to buying american, but the likes of system76 have already made their allegiances clear.
Aw crap. What did they do? :(
Been somewhat out of the loop lately.