Hector Martin

So RYF has a "secondary processor exception". Which basically means that as long as proprietary firmware is stored separately from the Free™ part, and you can't touch it, and you're firewalled from it, Everything Is Peachy.

This is, of course, total crap. A device that respects user freedom is a device that *allows* the user to modify proprietary firmware, that *exposes* exactly what proprietary firmware is there, and that *encourages* reverse engineering to produce a Free version.

What *I* want is hardware with exactly as much proprietary firmware to make it practical (and no more), where all of it is in /lib/firmware (or equivalent). No secret flash memories. I can mess and reverse engineer it all. This is the exact opposite of what the FSF encourages.

Of course, you still want to be firewalled from devices using proprietary firmware wherever possible (in the form of interfaces that are secure, e.g. no free memory read/write from the blob), but that has nothing to do with not allowing the free side to send the blob over.

But RYF instead says you must hide and bury any firmware you end up having to have. And so @Puri_sm end up having to do utter nonsense, like using a secondary CPU core to load the DDR4 controller firmware into the hardware, just so they can claim the binary blob is elsewhere.

They store the blob on write-protected SPI flash (because users must not have the freedom to modify any firmware they do wind up running), and write some code for the secondary CPU just so that the main CPU doesn't get digital cooties from (eeeeeew) touching the DDR4 code.

Keep in mind this isn't even about the secondary (or main) CPU *running* the firmware. The firmware is always run by an embedded processor in the DDR4 PHY anyway. This is just about having the main CPU never even *see* the firmware. See no evil, hear no evil, speak no evil.

So it doesn't matter that the DDR4 controller firmware has access to all RAM and obviously can pwn the main CPU at will. As long as you bury it in read-only memory, and make sure it never is accessed by the main CPU, the FSF will give your product their meaningless rubber stamp.