not mentioned: the mitigations (e.g. IBRS) require a microcode update to be fully effective
Conversation
Replying to
I... seriously don't get this way of thinking, do they think that the processor as you buy it has no microcode?
1
1
They choose to ignore that the components in their system are proprietary hardware with proprietary microcode and firmware. They see the problem as shipping updates or even having the possibility of updating it. They consider it open and freedom respecting if updates are blocked.
1
3
It's ridiculously backwards and nonsensical. They brand/market their beliefs as being about freedom, users controlling their devices and privacy but all they really care about are the arbitrary rules and rituals they've developed over the years. It's nothing more than a cult.
Their RYF (Respects Your Freedom) certification enforces that the hardware has proprietary firmware stored in persistent state rather than requiring the OS to load it each boot. It makes the hardware less secure, less transparent and takes away control rather than providing it.
1
4
Would you rather have a Wi-Fi/Bluetooth baseband with opaque proprietary firmware stored internally or a stateless one where it doesn't function until the OS loads the firmware and malware can't persist on it? FSF disallows the latter more modern approach where OS loads firmware.
2