Conversation

Linux Libre is a project that removes support for runtime loading of any non-free firmware or microcode by the kernel, which means that Linux Libre users are unable to update to the microcode required to avoid any of the speculative execution attacks

164

Matthew Garrett

@mjg59

May 16, 2019

Owning the proprietary software industry by forcing yourself to run insecure code

135

Replying to

By what logic does it make sense that the microcode already in your Intel CPU is trustworthy, but *not* the microcode they give you later to update it?

Replying to

and

It's about ideology (their concept of freedom), not security or trust. They take issue with open source firmware with signature verification too, and firmware *should* have signature verification.

1:05 PM · May 17, 2019Twitter Web App

Retweet

Quote Tweet