• 0 Posts
  • 219 Comments
Joined 2 years ago
cake
Cake day: June 29th, 2023

help-circle





  • This is basically the same argument that caused the libreboot vs gnuboot thing and I just personally don’t get it. It seems to me like the FSF is letting perfect be the enemy of the good. Having a FOSS driver isn’t something to be celebrated it’s something to be punished if the firmware isn’t also FOSS. Yes, ofc, FOSS firmware is better than closed firmware, but when almost no modern hardware has that as an option, it’s not even something you can really vote on with your wallet unless you just run ancient hardware all the time.

    It matters because for me, a good chunk of the FOSS benefit is the auditability of code. Being able to make changes is nice and that’s the freedom bit, but being able to audit it is also a huge benefit. If the code is not running on the main CPU then the driver on the main CPU can contain possible exploits of firmware using the IOMMU etc so it becomes more tolerable than a closed source driver. Basically a firmware vulnerability effectively becomes a hardware vulnerability as opposed to a driver running with full kernel privileges and no oversight or containment.




  • Apologies, when I said free hardware I meant design as well as somewhat blending the term with free firmware. But either way the difference they draw isn’t really all that different when you think about it. It’s sort of irrelevant whether or not the firmware can be easily updated, what really matters is where the firmware is being executed. If it’s running on the device then it can be isolated by the host system, if it’s running on the host then it’s not really firmware but rather part of the driver. The semantics don’t change just because the firmware is “easily updatable.” Having it be uploaded by the driver provides security benefits in that it can be patched by the manufacturer after the fact and having firmware in ROM which can’t be patched doesn’t guarantee it’s more secure or even less complex in design. I guess I just see it as a somewhat arbitrary line and I personally don’t agree with it


  • To be clear, I’m not saying I don’t want open hardware, what I’m saying is I don’t get the point of allowing closed hardware that doesn’t require a firmware blob as opposed to closed hardware that does. That’s a very arbitrary and silly line that does nothing useful. They’re going on this crusade of “no blobs.” But why? There’s lots of hardware that already has closed blobs on the HW, but because it’s not uploaded by the driver those blobs are ok? You either have to say all closed firmware is bad and we’re going to take a stance against any devices which have any amount of closed firmware, even when shipped on ROM in the HW. Or, closed firmware is tolerable so long as the driver is fully FOSS. I love the idea of not having closed firmware but I just don’t get the intellectual inconsistency here.



  • Look, I love FOSS and open platforms, to the point that I will only run proprietary software if it is sufficiently sandboxed AND there is no alternative. Unfortunately, hardware just isn’t there right now. You basically cannot have a modern computing experience on fully open hardware. At some point you have to make a compromise with it, it’s unfortunate but it’s the world we live in. Typically that compromise is either all open software with closed hardware and firmware, or all open software and firmware, with incredibly old or restricted hardware (which is still closed). I have yet to see any solution that involves truly, fully open hardware and so you basically have to just draw an arbitrary line and say “this is good enough.”




  • The IP suite is not nearly as neatly layered as OSI was and the OSI model doesn’t neatly fit the IP suite since it wasn’t actually designed for IP at all. In the IP suite layers 5 and 6 basically don’t exist in the OSI sense, TCP handles things that are part of both layers 4 and 5 in the model despite being a single protocol, etc. The OSI model is often considered obselete as it just doesn’t actually fit the IP world all that well but it’s been around so long and does have uses in certain situations that it tends to stick around.