▲ | lrvick a day ago | |
Open source drivers is a big step forward we must not discount, creating a separation between hardware trust and OS trust. That said, to your point, both are misrepresented as fully open frequently which is just not true, and obscures efforts by teams that are working on fully open hardware solutions the hard way. | ||
▲ | strcat 19 hours ago | parent [-] | |
> creating a separation between hardware trust and OS trust Typical Android devices have fully open source kernel drivers. There are usually dozens of closed source libraries in userspace such as the well known Mali GPU driver library. Closed source libraries can still be reviewed. Open source doesn't make something secure and trustworthy. It also isn't a hard requirement to review a library. Auditing a low-level C library doesn't imply finding all the vulnerabilities, particularly something hidden. Widely used open source code still has many vulnerabilities lasting for long periods of time after many people have reviewed it. It does not solve security or trust. > That said, to your point, both are misrepresented as fully open frequently which is just not true, and obscures efforts by teams that are working on fully open hardware solutions the hard way. A closed source SoC with open source hardware built around it and other closed source components including radios is not a fully open source computer either. |