Purism on Spectre and Meltdown and the microcode update

10 replies [Last post]
ivanB1975
Offline
Joined: 08/29/2017

yep I agree but this is for a possible future, but in the meantime now should we not try to mitigate the problem for our actual hardware?

ivanB1975
Offline
Joined: 08/29/2017

I wonder if running a os in a virtual machine is safer

Magic Banana

I am a member!

I am a translator!

Offline
Joined: 07/24/2010

For Meltdown, it is not. In particular, the memory of other virtual machines can be read.

ivanB1975
Offline
Joined: 08/29/2017

Thanks :)

Magic Banana

I am a member!

I am a translator!

Offline
Joined: 07/24/2010

But I cannot because the distro blocks the microcode updates.

How is Trisquel "blocking" updates? That would be DRM! I believe you confuse "not proposing" with "blocking": no Trisquel developer is working to prevent you from installing something on your system.

ivanB1975
Offline
Joined: 08/29/2017

Blocks meaning doesn't provide any package to facilitate the update. Using distro packages is the preferred way to do the update while the manual update is not.
I tried the manual and also to use packages from ubuntu unsuccessfully

onpon4
Offline
Joined: 05/30/2012

Trisquel would have its GNU FSDG status rightly revoked if it provided proprietary software.

ivanB1975
Offline
Joined: 08/29/2017

yep, I know but I am thinking that for this particular case a different strategy should be adopted.
Because taking such a strict position can be sustained only ditching the actual CPUs in toto. It is clear that this is not possible at the moment, so some sort of compromises should be used.
Many people are pretty upset (see Linus T. on some public mailing lists) and this could be the right moment for alternatives to emerge. But It will require a lot of time.

chaosmonk

I am a member!

I am a translator!

Offline
Joined: 07/07/2017

I've decided not to send what I just wrote because I've already fanned enough PureFlames in this forum. Instead I'll just say that I completely agree with you, and that I would like to share this thumbnail from a video called "Why you should support the Librem 5 phone", as I believe it is meme-worthy.

purelinux.png
chaosmonk

I am a member!

I am a translator!

Offline
Joined: 07/07/2017

Example usage: Someone shares a screenshot of their i3-gapped solarized desktop on /r/unixporn.

"Impressive. But do you run PURE LINUX?"

purelinux.png