From: Leah Rowe <info@gluglug.org.uk>
To: Alex Vong <alexvong1995@gmail.com>
Cc: guix-devel@gnu.org
Subject: Re: What do Meltdown and Spectre mean for libreboot x200 user?
Date: Mon, 15 Jan 2018 11:32:40 +0000 [thread overview]
Message-ID: <6e931622-65fc-fe0b-491f-3e94c6acdf0b@gluglug.org.uk> (raw)
In-Reply-To: <87shb8qxl4.fsf@gmail.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hi Alex,
On 14/01/18 15:17, Alex Vong wrote:
> Thank you. I have updated my kernel. For the browser part, I
> currently run tor browser with security level set to high (so that
> javascript is disabled by default). Maybe you can tell people on
> #libreboot about this solution if you like.
This is technically unrelated to Libreboot, even if it is an important
issue. swiftgeek and I decided not to document anything about it on
the site.
In my opinion, GNU+Linux distributions should be the ones advising
people, since all of the defense/mitigation is done there at that
level. The implications at firmware level are non-existent (for
instance, these attacks can't, to my knowledge, be used to actually
run/modify malicious code, just read memory, so it's not as if some
evil site could install malicious boot firmware in your system).
- --
Leah Rowe
Libreboot developer and project founder.
Use free software. Free as in freedom.
https://www.gnu.org/philosophy/free-sw.html
Use a free BIOS - https://libreboot.org/
Use a free operating system, GNU+Linux.
Support computer user freedom
https://fsf.org/ - https://gnu.org/
Minifree Ltd, trading as Ministry of Freedom | Registered in England,
No. 9361826 | VAT No. GB202190462
Registered Office: 19 Hilton Road, Canvey Island, Essex SS8 9QA, UK |
Web: https://minifree.org/
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEE+JRrnG26iGmvPhSA/0W3TPnRz5QFAlpckVcACgkQ/0W3TPnR
z5QjOgf/WGDpNZBYVuk+TxplF/Fq7D3dooTasbEEjjcPt8vnqCUZXHTKg9lZDrjd
yCWFkhWvR3ZkTQSoxVMbinHvQg8iDH5ZMOae5KAjxlFVeKFVHvS79UpMwHEs6SE0
PZK5p18rD3g43U1C6ck4UCnKTeSmDmUWrcLqAXa0RAcT+jvnhLCn3b4vAnyxZKjj
KguwmMGd0+vO4b22Na9lPA9HoHwDZEMYydr38n1x7U7ZYFw1XymfD9R9i/8+YksE
ATbmiVx6Dk0IKHEVU2dtIDOi20fRJIqEKotXFR71TMSIfXOySTn61y1Y0aEziSsQ
Cys1b3F9Tux8MwV8aB+mwNga3H/UBQ==
=t2lW
-----END PGP SIGNATURE-----
next prev parent reply other threads:[~2018-01-15 11:32 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-01-10 8:56 What do Meltdown and Spectre mean for libreboot x200 user? Leah Rowe
2018-01-14 15:17 ` Alex Vong
2018-01-15 11:32 ` Leah Rowe [this message]
2018-01-15 13:25 ` Andy Wingo
2018-01-19 14:26 ` Leah Rowe
2018-01-19 14:29 ` Leah Rowe
-- strict thread matches above, loose matches on Subject: below --
2018-01-06 13:20 Alex Vong
2018-01-06 17:23 ` Mark H Weaver
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=6e931622-65fc-fe0b-491f-3e94c6acdf0b@gluglug.org.uk \
--to=info@gluglug.org.uk \
--cc=alexvong1995@gmail.com \
--cc=guix-devel@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/guix.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.