Ask HN: Are Raspberry Pi devices free of hardware spyware (Intel ME/AMD PSP)?
Are they truly secure devices if booted with the correct OS? Remember that the RPi SoC isn't primarily ARM. There's a multistage process to boot the VPU/GPU which in turn runs the ARM as a sort of child. Is that boot process closed source? Yes - there are people who've figured out their own boot processes, but everyone really uses the default Broadcom one. Afaik only ARM chips have no ME and PSP. Since ARM is British they should also be infected though. Your best bet is to wait for a EU chip. So, you think ARM has its own version of IME/PSP? It's a British company Thats a really good question. My money is on NO. Is there a way to check it out? OK - so I don't know - but here is why I said NO: I've worked in the industry since 1997, with one of my first experiences in 1997 with a double-digit CCIE cracking a cisco 3640 who told me how the NSA required them to place back-doors into all cisco devices - and he was under NDA, but he told me anyway... Then working at intel... then working with Mirantis+intel+redhat to build out "secure computing clouds" -- and shortly after, it was revealed that they put the back-doors on the actual intel procs... And the USA bitched about the chinese back-doors on all Huwai chips... And intel and Huwai were comepeting on Openstack hardware... I mean FFS - EVERYTHING is compromised. Then Snowden happened Then FB - NSA revolving door... I have encountered spyware-hardware in everything... Then built out spying tech with Vizio, Philips, LG... So yeah - I don't even care about privacy at this point - because it doesn't exist. Maybe Ryan Lackey, Chris DiBona, or David Sifry can give you more insight... But fuck - there is no such thing as privacy. So just say fuck it. --- Oh, and just to further clarify: Echelon, Carnivore, AT&T Room 641A [0] --- Guess who was on floor 7 of that building directly above 641A when they were founded -- TWITTER.com And guess who bought MAE WEST after the patriot act was passed; Cerberus Capital (north first street san jose) and guess who owned PAIX (Palo Alto Internet Exchange) Where all of stanfords traffic passed through And guess who was trying to ensure that CARNIVORE was installed all over the place - so they just fn bought the IXs -- Anyway - just assume a FN NO PRIVACY policy - even VPNs are all suspect.... What do you think about System76 and Purism hardware? Is there any hope in there? At least hardware-wise? Cant comment on Purism... System76 - I have many of their laptops (none of their own machines) - but they are/were white-labeled machines... But the positive thing I can say abt system76 - you got a LOT for bang-for-buck... oddly I like HP again, and MSI. What hardware would then you use to get a secure environment? Is there something better that system76? Orange Pi? What do the big players use to avoid loosing secrets? Oh and here is a crazy story: The only group to lit stand up to the installation of CARNIVORE in their DCs at the time was Earthlink.com - who said NO to the install of that system.... But not because they were "standing up" They developed their OWN spying system and were logging and spying on all their customers........ And who owned Earthink? The mormons..... MASSIVE EDIT] It wasnt the mormons who owned earthlink it was the scientologists. and THATS why they were monitoring all - because they were after all the ClamBake people... I forgot. And ironically/coincidentally, who does the NSA really like to hire? Mormons! And who is keeping DNA tracks on Ancetry? The mormons And who in the USa has one of the largest data vaults? The mormons..... Spying is a WEIRD world. Everything is known, but the saddest part: the Five Eyes all share it.