> And as Talos has shown, even most of the microcode is open source or at least publicly verifiable. All of the microcode and firmware is fully verifiable and

> And as Talos has shown, even most of the microcode is open source or at least publicly verifiable. All of the microcode and firmware is fully verifiable and owner buildable/modifiable. Even the secure boot root trust keys are publicly known and can be personalised with your own key with, of course, the well-known key distrusted. AFAIK, the only thing that isn't owner modifiable (or modifiable by anyone else really), besides the silicon, is the one-time programmable ROM which the processor bootstraps from on power-on is publicly verifiable w/ assembler source code. Datasheets and programming information is available for almost every single chip on the board - as are schematics (woohoo! I've already used them to make repairs a few times). As of right now, the only blob required, on the stock system, is related to the broadcom network chip firmware - and that's been fully reverse engineered and a beta version of the firmware which is clean room open source is now available (project ortega). It's the most open and hacker-friendly system I've ever owned and I really wouldn't want to have to go back to something less.