4 ms·
A la xz. You must ultimately root trust in some set of binaries and any hardware that you use.
by paulddraper 2y ago
A la xz.
You must ultimately root trust in some set of binaries and any hardware that you use.
- XorNot 2y agoFor user space? No you can definitely do a stage 0 build which depends only on about 364 bytes of x86_64 binary (though ironically I haven't managed to get this to work for me yet). The liability is EFI underneath that, and the Intel ring -1 stuff (which we should be mandating is open source).
- paulddraper 2y ago> which depends only on about 364 bytes of x86_64 binary
- jesboat 2y agothat's the point at which you say (reasonably accurately) that the 364 byte thing is written in machine code. it is small enough to manually translate between the binary and asm