Re: Debian derivatives census: Inquisitor: status?
>> However, I also consider security issues part of basic hardware
>> functionality. If I'm buying a new server, I want to see CHIPSEC logs
>> first, if the hardware is known to be vulnerable, I'm going to return
>> it, just like if it had a bad mobo.
>
> CHIPSEC checks are not a matter of stability or something - it's just
> a matter of identification. It's binary - vulnerable / not vulnerable,
> that's not some analogue signal / cooling system performance /
> temperature graphs / etc.
Yes, CHIPSEC checks are not the normal hardware checks that most
hardware testing tools normally check for. CHIPSEC tests if the OEM
built insecure hardware. It is a one-time test that most people don't
check, unlike if power supply/etc works. If the machine does not
operate, it should not be purchased. If the machine was insecurely
built, it should not be purchased. If it was purchased, it should be
returned as faulty. Some clients are not able to influence their
merchants, but others are. Unfortunately, all of the purchase criteria
people make today with hardware often does not include broken security
design. But after the system is purchased, that's nearly all people
focus on, and if CHIPSEC logs show the system if flawed, then you can't
have a secure system. I'd like to get to a point where OEMs include
CHIPSEC logs as part of their pre-sales information, to show that their
products are not flawed.
Thanks,
Lee
Reply to: