On 05/05/2018 03:21 AM, Erik Christiansen wrote:

> On 05.05.18 05:32, Andrew McGlashan wrote:
>> But whilst I still can, I'll at least run my own servers and rely on the
>> "cloud" as little as possible.  Librem 5 phone coming next year for me.
> If there isn't an ARM board sufficiently free of remote control
> parasitic low level engines, then perhaps there's a RISC-V offering in
> the pipeline with a little luck.
Apparently there are a few of them in coreboot which are almost free,
but do you mean an ARM laptop or an ARM server/workstation? I believe
coreboot only has the first although there were some recent posts
talking about how the thunderX server board is somewhat free I would
suggest checking them out.

The two main issues I see with RiscV is that they have implemented SMM
and that there is no IOMMU which I believe is mandatory for any system
these days especially one that has complex un-trusted devices such as
graphics cards with binary firmware. I do everything in VM's via
multiple graphics cards on my KGPE-D16 including watching movies and
playing games, I no longer have to worry that for instance a mod I
download will steal my data as the VM has no data.

I hope they start adding IOMMU's to phones to restrict the baseband and
assorted hardware, even using a non DMA bus is still very dangerous and
non-isolated when you consider badusb style attacks.

Attachment: 0xDF372A17.asc
Description: application/pgp-keys

_______________________________________________
Dng mailing list
[email protected]
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Reply via email to