00:03
illustris has quit [Ping timeout: 245 seconds]
00:04
evils has quit [Ping timeout: 240 seconds]
00:05
illustris has joined #nixos-aarch64
00:58
rajivr has joined #nixos-aarch64
01:24
h0m2 has quit [Ping timeout: 245 seconds]
01:26
h0m2 has joined #nixos-aarch64
03:18
heywoodlh has joined #nixos-aarch64
04:34
<
Ke >
technically UFS
05:32
<
Ke >
anyone else concerned that realms on armv9 might mean adding ARM only controlled PSP/ME thingy?
05:32
<
Ke >
not sure how that would work, if they license the ip so there could not be any hidden keys
05:33
<
Ke >
maybe they just mean protection from board vendor, not SoC manufacturers
05:50
<
simpson >
Happens. The only way to discourage it is to reverse-engineer whatever DRM gets built and leak the keys.
05:55
<
clever >
Ke: i could see that issue existing with armv8 as well
05:55
<
clever >
EL3 where trustzone/ME stuff runs, is optional
05:55
<
Ke >
in general though the concept is nice, if only it was made user controllable, which does not allow some use cases though
05:56
<
Ke >
clever: sure, but it's optional
05:56
<
clever >
enless the firmware gives itself away via runtime behaviour or being visible in the boot rom
05:56
<
Ke >
ME/PSP were not so much at some point
05:56
<
clever >
you have zero way to tell the difference between it being absent, or it deciding your not trustworthy
05:56
<
clever >
so it might be present, without you knowing it!
05:57
<
clever >
its purely down to how much you trust the creator of the chip, and if trusted firmware is found, that talks to an EL3 that "shouldnt exist"
05:57
<
clever >
optional does not garantee missing
05:58
<
Ke >
I don't mean that there is some way to not to trust the fab or any process beyond that, I mean PSP is always on and incompetence can hurt me
05:59
<
clever >
EL3 can at least sorta be shut off
06:00
<
clever >
if you dont setup any handlers, i think the cpu will never get back into EL3 (would have to confirm that...)
06:00
<
Ke >
there were designs where you could add a couple of capacitors and transistors and hijack the system by fab
06:00
<
clever >
but with things like PSP? and the VPU(on rpi chips), its an entirely seperate cpu
06:00
<
Ke >
practically undetectable
06:00
<
clever >
it cant really be shut off, and with stock firmware, it must remain functional, or you loose major features
06:01
<
clever >
Ke: do you know much about the rpi stuff?
06:01
<
Ke >
isn't rpi horrible in all sorts of imaginable ways, not touching it anyway
06:01
<
clever >
what horrors have you heard of?
06:01
<
Ke >
I know enough to stay away from it
06:02
<
Ke >
nothing I would remember too concretely
06:02
<
clever >
i can run linux+nixos on the pi2 and pi3, with zero blobs involved
06:02
<
clever >
fully open source, for the entire stack
06:02
<
Ke >
I did read some text written by some person who gave up on open source fw previously
06:02
<
Ke >
also the fact that it's different with no visible reason is a turn off to me
06:03
<
clever >
pi0 and pi1 are able to start booting with fully open firmware as well, but linux crashes mid way thru the boot
06:03
<
Ke >
being different is ok for people, but for standardized tech not so much
06:03
<
Ke >
but surely I can admit you know more
06:04
<
clever >
i have been working on the rpi-open-firmware project for about a year now, and know the hw at a fairly deep level
06:04
<
Ke >
yes, you mentioned before
06:05
<
clever >
the most recent major progress, is getting composite video functional, the first time i can get any video at all out of it
06:05
<
clever >
and just this week, getting the arm functional from little-kernel, which makes developing new features far simpler
06:06
<
clever >
with a bit more work combining those 2, i believe i could get X11 running, and have a functional desktop env
06:07
<
clever >
and then its basically just another SBC, minus some hw accel
06:08
<
Ke >
anyway, what's the relation to the original topic, or did you digress?
06:08
<
clever >
that the VPU firmware could pull off tricks similar to a PSP or ME firmware
06:09
<
Ke >
sure, but that's specific to each SoC, not all of ARM
06:09
<
clever >
the VPU is able to somehow access the arm jtag, and deny access to chunks of ram
06:09
<
Ke >
now the idea is that you select the nicest SoC you can
06:09
<
clever >
yeah, just on this one specific set of implementations
06:10
<
clever >
i was aiming more for an SoC with a pre-existing large user-base
06:10
<
clever >
so users could jump ship at zero cost
06:10
<
Ke >
I can admit that many socs have peripherals that are not sufficiently isolated, though it might be that you don't need to turn them on
06:11
<
Ke >
I guess ARM has no reason to make Realms mandatory, though NXP as an automotive vendor might have
06:12
<
Ke >
then again Qoriqs are not automotive
07:42
FRidh has joined #nixos-aarch64
08:06
zupo has joined #nixos-aarch64
08:28
zupo_ has joined #nixos-aarch64
08:31
zupo has quit [Ping timeout: 240 seconds]
08:32
FRidh has quit [Quit: Konversation terminated!]
08:41
cole-h has quit [Ping timeout: 268 seconds]
09:07
orivej has quit [Ping timeout: 268 seconds]
09:14
alpernebbi has joined #nixos-aarch64
09:29
orivej has joined #nixos-aarch64
09:50
zupo_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
10:50
evils has joined #nixos-aarch64
10:52
zupo has joined #nixos-aarch64
12:03
zupo_ has joined #nixos-aarch64
12:05
justanotheruser has quit [Ping timeout: 258 seconds]
12:06
zupo has quit [Ping timeout: 240 seconds]
12:13
dev_mohe has joined #nixos-aarch64
12:18
dev_mohe has quit [Quit: dev_mohe]
12:29
ryantrinkle has quit [Quit: Leaving.]
12:33
ryantrinkle has joined #nixos-aarch64
12:34
orivej has quit [Ping timeout: 265 seconds]
12:52
orivej has joined #nixos-aarch64
13:02
monk has left #nixos-aarch64 ["Error from remote client"]
13:02
monk has joined #nixos-aarch64
13:04
alpernebbi has quit [Quit: alpernebbi]
13:37
zupo_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
13:47
zupo has joined #nixos-aarch64
13:57
zupo has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
14:01
zupo has joined #nixos-aarch64
14:03
zupo has quit [Client Quit]
14:33
zupo has joined #nixos-aarch64
14:37
zupo has quit [Client Quit]
14:56
Raito_Bezarius has quit [Ping timeout: 258 seconds]
15:09
Raito_Bezarius has joined #nixos-aarch64
15:18
lopsided98 has quit [Remote host closed the connection]
15:20
lopsided98 has joined #nixos-aarch64
16:00
hiroshi[m] has quit [Quit: Idle for 30+ days]
16:50
<
Ke >
so librem phone packages was presumably close to merge and now it has gone stale, is it due to requiring patches in existing packages?
16:51
cole-h has joined #nixos-aarch64
17:23
monk has left #nixos-aarch64 ["Error from remote client"]
17:36
ryantrinkle has quit [Ping timeout: 265 seconds]
17:39
ryantrinkle has joined #nixos-aarch64
17:40
monk has joined #nixos-aarch64
17:46
rajivr has quit [Quit: Connection closed for inactivity]
17:58
sciamp has joined #nixos-aarch64
18:01
justanotheruser has joined #nixos-aarch64
18:28
zupo has joined #nixos-aarch64
18:35
sciamp has quit [Ping timeout: 268 seconds]
18:38
ryantrinkle has quit [Ping timeout: 240 seconds]
18:41
zupo_ has joined #nixos-aarch64
18:45
zupo has quit [Ping timeout: 268 seconds]
18:49
zupo_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
18:56
<
samueldr >
no real details yet, but looking at the help, looks like it's a generic tool that uses the previously released mediatek bootrom exploits to... do stuff...
18:58
<
samueldr >
hopefully soon do... more stuff, like backup/restore
18:58
<
samueldr >
the author (bkerler) has a authored a qualcomm EDL client too
19:03
ryantrinkle has joined #nixos-aarch64
19:19
ryantrinkle has quit [Ping timeout: 240 seconds]
19:19
zhaofeng has quit [Quit: Bridge terminating on SIGTERM]
19:20
zhaofeng has joined #nixos-aarch64
20:12
cole-h has quit [Quit: Goodbye]
20:14
zupo has joined #nixos-aarch64
20:16
cole-h has joined #nixos-aarch64
20:45
ryantrinkle has joined #nixos-aarch64
20:55
sciamp has joined #nixos-aarch64
21:26
ryantrinkle has quit [Ping timeout: 246 seconds]
21:31
sciamp has quit [Quit: Konversation terminated!]
21:31
sciamp has joined #nixos-aarch64
21:37
orivej has quit [Ping timeout: 240 seconds]
22:15
sciamp has quit [Ping timeout: 240 seconds]
22:35
zupo has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
23:27
ryantrinkle has joined #nixos-aarch64