Yes they have to be able to update the system but in this case they are also abl... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		mulmen on Dec 1, 2017 \| parent \| context \| favorite \| on: System76 ME Firmware Updates Plan Yes they have to be able to update the system but in this case they are also able to update the firmware without asking which means anyone who can impersonate or coerce them can also update the firmware.

ibotty on Dec 1, 2017 [–]

If you control the OS, you also control the firmware (if you want a way to install new firmware from the OS). No way around.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact