Re: Matthew Garrett: Producing a trustworthy x86-based Linux appliance

[Bernhard Bitsch <bbitsch@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 1062 bytes --]

Hi,

Michael you are right.

Am 03.06.2021 um 14:40 schrieb Michael Tremer:
> Hello,
> 
> I have seen this article as well, but I did not take away much from it.
> 
> It says to me:
> 
> * You cannot trust hardware
> * You cannot trust firmware
> 

You can't verify hardware and firmware, because you do not get a 
complete description, which is necessary despite of comülexity.

> And so any software running on top of that cannot validate itself. We just have to hope for the best.
> 

Software itself can be verified in most parts, theoretically. But it a 
matter of complexity whether this can be done in an adequate time.
What can't be verified is the implementation, see above.

- Bernhard

> -Michael
> 
>> On 2 Jun 2021, at 22:25, Peter Müller <peter.mueller(a)ipfire.org> wrote:
>>
>> Hello *,
>>
>> in case anybody still needs reading matter, https://mjg59.dreamwidth.org/57199.html might
>> be worth a lecture - if you trust the (x86) hardware, that is. :-)
>>
>> Thanks, and best regards,
>> Peter Müller
>