• 0 Posts
  • 51 Comments
Joined 1 year ago
cake
Cake day: July 7th, 2023

help-circle













  • I don’t see it as irrational. You’re thinking about it the wrong way round.

    Manufacturers buy chips from proven sources, where the chip can be traced back to the fab that made it. The entire system of trust is built on the assumption that the chip designers and fabs are trustworthy and that the shady stuff happens elsewhere in the supply chain.

    When the designers can’t be trusted, it breaks everything. Up until now it hasn’t been a problem except in extremely sensitive areas like military equipment - only governments can force a company to risk everything by compromising their own products. But take the risk away - make it cheap enough to design new microcontrollers - and what’s to stop a chip designer from taking money from (for example) the Russian mafia? IoT is huge, everywhere, and Risc-V is ideally suited for it.


  • I don’t think it’s so much “security by obscurity” as it’s an issue of a much lower bar for chip production. Intentional back doors or malware represent a huge risk for a product line, so manufacturers won’t put them in without someone like the NSA leaning on them. It’s a simple risk/benefit calculation.

    But the risk is much lower if you can snag a processor design off the 'net, make your modifications, send it off to a fab and sell it under a fly-by-night operation. If it’s ever discovered, you take the money and run.


  • I see this sort of thing all the time.

    There’s a disconnect between the time scales for industrial equipment and the time scales for IT and telecommunications. A PLC running a factory might last 30 years, but the software to program and troubleshoot it won’t run on modern operating systems or computers. The company doesn’t want to spend hundreds of thousands of dollars to upgrade it when there’s nothing wrong with it.

    Same with telecommunications - POTS worked for a century, and over the last decade we’ve seen it largely disappear, which makes fire alarm panels everywhere inoperative. We recently ran into an issue where a fire marshall refused to allow anything but POTS and all of the non-end-of-life hardware only supported IP.




  • Emacs has org-mode. It’s similar to markdown, with a ton of extra functionality and the ability to export very nice documents in other formats like LaTeX, HTML, and OpenDocument. When read as plain text it’s clear and easy to read.

    It’ll also act as a personal planner, a TODO list wrangler, format tables with spreadsheet capabilities, and a whole lot more. It’s basically Emacs’ killer app.


  • I don’t believe so - the docs mention several ways to boot a pi but most only work for newer models.

    An option might be to boot an SD card read-only and run everything over NFS. It’s trivial to do that sort of thing with some UNIX clones (OpenBSD, for instance), but I don’t know about a modern Linux.