Re: How secure is an installation with with no non-free packages?

[Pedro Worcel <pedro@worcel.com>]

> Who said they improve security? We don't know what they are. And I doubt

> they will patch a backdoor at this moment, specially when you don't know

> what the hell they have in your hardware. So my guess is that it's more

> likely their microcode is inserting a backdoor instead of patching it

Are there some sort of release notes for these patches? 

2013/9/13 Jordon Bedwell <jordon@envygeeks.com>

On Thu, Sep 12, 2013 at 9:03 PM, adrelanos <adrelanos@riseup.net> wrote:
> Microcode. (I guess if the vulnerability can not be fixed with some kind
> of firmware upgrade and is used in the wild, that would be a reason to
> get it replaced for free or being required to buy a new one.)

I'm not a lawyer but even I know a vendor like Intel or AMD cannot
"require" you to buy a new processor as long as it's under warranty,
and security/performance issues do count as a warranty issue... they
do microcode updates now to avoid having to recall because of that
type of situation not to mention the numerous other benefits such as
fast shipping and other stuff.

--
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Archive: [🔎] CAM5XQnzeQg4-8qcYXryBWjaNqrUmPEVSXtLgES3mrHXJwT54Jg@mail.gmail.com" target="_blank">http://lists.debian.org/[🔎] CAM5XQnzeQg4-8qcYXryBWjaNqrUmPEVSXtLgES3mrHXJwT54Jg@mail.gmail.com

--

GPG: http://is.gd/droope