4 ms·
Yes, it would technically meet the Open Source Initiative's definition (https://opensource.org/osd https://opensource.org/osd), but if there was no way to re-fl
by davideous 10y ago
Yes, it would technically meet the Open Source Initiative's definition (https://opensource.org/osd https://opensource.org/osd), but if there was no way to re-flash the device, no way to verify the binary on the device, or possibly even no way build a binary (which may require proprietary tools under NDA from the chip manufacturer) -- I think a lot of critics would still be critics, but I could be wrong.
If Yubico did this it would be very interesting to see the reaction.
- jevinskie 10y agoIt would allow a third party to discover a vulnerability similar to the one in the Neo just by just reading the code.
- mavhc 10y agoThe general issue is when all hardware has software in, in the end it has to be open source. Going even further: The distinction between hardware, firmware, and software is logically irrelevant in terms of trust.