3 ms·
You have two options: - either you give your users an ability to upgrade the firmware, so they can RE it, write and use an open replacement - or you don't giv
by seba_dos1 8y ago
You have two options:
- either you give your users an ability to upgrade the firmware, so they can RE it, write and use an open replacement
- or you don't give your users an ability to upgrade, which doesn't help anyone since they can never be sure if the chip manufacturer didn't put some undocumented interface somewhere that even you weren't aware of; so now only the chip manufacturer can upgrade the firmware and the user can't
Realistically, in a context of mobile phone components, there hardly such thing as "not updatable firmware". You can never be sure.
- snaky 8y ago> so they can RE it, write and use an open replacement Crypting and signing is trivial, so nobody is going to RE Intel ME or microcode updates.
- seba_dos1 8y agoSure, but there are plenty of unsigned firmwares out there that could be replaced, but need to be sealed in order to get RYF certification.