87
BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices - Eclypsium | Supply Chain Security for the Modern Enterprise (eclypsium.com)
submitted 1 year ago by to c/linux@lemmy.ml
41 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 26 points 1 year ago (6 children)

Wait until you hear about the proprietary microcode backdoors in Intel and AMD processors.

  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [–] 7 points 1 year ago (4 children)

    this is one of the reasons why i've only purchased systemd w libre/coreboot

    i'm aware that it doesn't completely mitigate it; but it's the only viable step in the right direction of choices that we're allowed to have.

    i sometimes wish i could go back to buying american, but the likes of system76 have already made their allegiances clear.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 13 points 1 year ago (3 children)

    the likes of system76 have already made their allegiances clear.

    Aw crap. What did they do? :(

    Been somewhat out of the loop lately.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 1 year ago (2 children)

    then you're in luck because it's old news. (circa 2016 iirc).

    tldr: they decided to pull away active development on some foss projects because they conflicted with their profit motive.

    it's easy to appreciate why a for-profit company would want to protect its revenue stream and it would seem that the waters would get really murky when their products rely on free and open sourced work; but i know from personal experience that much bigger fish like google and oracle have made it work REALLY well for themselves and in much better fashion (atleast publicly) than system76 has.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 1 year ago (1 child)

    Ah I see what you're saying.

    Thanks for taking the time for the clarification! I'm sure this would clear it up for some other folks as well.

    I also know they're a fraction of the size of those giants who can probably field staff specifically for FOSS contribution, but that's still a bit disheartening. I hope things improve.

    Every time they've seemed like a good option I find myself balking at the price though lol.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 1 year ago

    my last linux rig died and i had to buy a new one and system76 price tag made me go with ordinary windows laptop and putting linux on it.

    i'm currently getting reminded of how much headache buying a from a linux-first company alleviates too; it's taken me over a week to setup an encrypted installation to dual boot with windows. lol

  • permalink
  • fedilink
  • source
  • parent