Ask HN: Are Raspberry Pi devices free of hardware spyware (Intel ME/AMD PSP)?

6 points by goferito 5 years ago | 13 comments

Are they truly secure devices if booted with the correct OS?

pinewurst 5 years ago |

Remember that the RPi SoC isn't primarily ARM. There's a multistage process to boot the VPU/GPU which in turn runs the ARM as a sort of child.

goferito 5 years ago | |

Is that boot process closed source?

pinewurst 5 years ago | | |

Yes - there are people who've figured out their own boot processes, but everyone really uses the default Broadcom one.

jjd33 5 years ago |

Afaik only ARM chips have no ME and PSP. Since ARM is British they should also be infected though. Your best bet is to wait for a EU chip.

goferito 5 years ago | |

So, you think ARM has its own version of IME/PSP?

jjd33 5 years ago | | |

It's a British company

samstave 5 years ago |

Thats a really good question. My money is on NO.

goferito 5 years ago | |

Is there a way to check it out?

samstave 5 years ago | | |

OK - so I don't know - but here is why I said NO:

I've worked in the industry since 1997, with one of my first experiences in 1997 with a double-digit CCIE cracking a cisco 3640 who told me how the NSA required them to place back-doors into all cisco devices - and he was under NDA, but he told me anyway...

Then working at intel...

then working with Mirantis+intel+redhat to build out "secure computing clouds" -- and shortly after, it was revealed that they put the back-doors on the actual intel procs...

And the USA bitched about the chinese back-doors on all Huwai chips...

And intel and Huwai were comepeting on Openstack hardware...

I mean FFS - EVERYTHING is compromised.

Then Snowden happened

Then FB - NSA revolving door...

I have encountered spyware-hardware in everything...

Then built out spying tech with Vizio, Philips, LG...

So yeah - I don't even care about privacy at this point - because it doesn't exist.

Maybe Ryan Lackey, Chris DiBona, or David Sifry can give you more insight...

But fuck - there is no such thing as privacy. So just say fuck it.

---

Oh, and just to further clarify:

Echelon, Carnivore, AT&T Room 641A [0] --- Guess who was on floor 7 of that building directly above 641A when they were founded -- TWITTER.com

And guess who bought MAE WEST after the patriot act was passed; Cerberus Capital (north first street san jose)

and guess who owned PAIX (Palo Alto Internet Exchange) Where all of stanfords traffic passed through

And guess who was trying to ensure that CARNIVORE was installed all over the place - so they just fn bought the IXs --

Anyway - just assume a FN NO PRIVACY policy - even VPNs are all suspect....

[0] https://en.wikipedia.org/wiki/Room_641A

samstave 5 years ago | | |

Oh and here is a crazy story:

The only group to lit stand up to the installation of CARNIVORE in their DCs at the time was Earthlink.com - who said NO to the install of that system....

But not because they were "standing up"

They developed their OWN spying system and were logging and spying on all their customers........

And who owned Earthink?

The mormons.....

MASSIVE EDIT]

It wasnt the mormons who owned earthlink it was the scientologists. and THATS why they were monitoring all - because they were after all the ClamBake people... I forgot.

And ironically/coincidentally, who does the NSA really like to hire?

Mormons!

And who is keeping DNA tracks on Ancetry?

The mormons

And who in the USa has one of the largest data vaults?

The mormons.....

Spying is a WEIRD world.

Everything is known, but the saddest part: the Five Eyes all share it.