On 08/23/2018 10:35 AM, Davide Prina wrote:
> Su /.[¹] è riportata una notizia alquanto preoccupante per la sicurezza:
>
> Bruce Perens writes: "The Register reports that Debian is rejecting a
> new Intel microcode update because of a new license term prohibiting the
> use of the CPU for benchmarks and profiling. There is a new license term
> applied to the new microcode: "You will not, and will not allow any
> third party to (i) use, copy, distribute, sell or offer to sell the
> Software or associated documentation; (ii) modify, adapt, enhance,
> disassemble, decompile, reverse engineer, change or create derivative
> works from the Software except and only to the extent as specifically
> required by mandatory applicable laws or any applicable third party
> license terms accompanying the Software; (iii) use or make the Software
> available for the use or benefit of third parties; or (iv) use the
> Software on Your products other than those that include the Intel
> hardware product(s), platform(s), or software identified in the
> Software; or (v) publish or provide any Software benchmark or comparison
> test results"
>
> Questo cambio di licenza di intel può rendere davvero problematico il
> lato sicurezza per i sistemi operativi distribuiti con licenza libera.
[snip]
Direi che in Debian la soluzione sarà di avere un pacchetto in non-free
che all'occorrenza scaricherà il microcode dal sito dell'Intel.
federico