3 ms·

Many open source projects are infiltrated. You may use Linux but if you run on x86 you are already owned.

• 0xfeba 9y ago
  Like what?
  • deleted 9y ago
    [deleted]
• SEJeff 9y ago
  Not via Linux, but via the IME that Intel puts on every CPU with full access to all memory and the network cards.
  • partycoder 9y ago
    One source of entropy in Linux is the RDRND instruction. If you control or predict its output you can do a lot of harm.
    • SEJeff 9y ago
      It really depends on a lot of the software as well. Linux doesn't inherently trust just the CPU instructions for entropy. In fact, it recently borrowed a new feature from OpenBSD and added it called getrandom(): https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c6e9d6f38894798696f23c8084ca7edbf16ee895 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...