5 ms·

This completely ignores the "evil maid" scenario.

• mschuster91 11y ago
  Not if the firmware updater enforces digital signatures like the ucode update does on CPUs.
  • deleted 11y ago
    [deleted]
• 885895 11y ago
  How so?
• deleted 11y ago
  [deleted]
• yrro 11y ago
  > The firmware updates themselves are signed and have a checksum, and the metadata describing this checksum is provided by the distribution either as GPG-signed repository metadata, or installed from a package, which is expected to also be signed. Maybe if your maid is also a distro developer...