Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Closed Source Hardware
Jason Miller, 2004-12-01

Trust with hardware vendors for open source systems is becoming a one-way street, where in exchange for support they offer a closed source binary solution with no provision to audit security.

Comments Mode:
Closed Source Hardware 2004-12-03
JTC (1 replies)
Closed Source Hardware - Clarifications 2004-12-03
Jason V. Miller (Author) (4 replies)
Closed Source Hardware - Clarifications 2004-12-04
anonymous elf
Closed Source Hardware - Clarifications 2004-12-04
Anonymous (1 replies)
Closed Source Hardware - Clarifications 2004-12-06
Jason V. Miller (Author) (1 replies)
Closed Source Hardware - Clarifications 2004-12-07
Andreas Mohr (1 replies)
While it doesn't really help security issues of in-kernel proprietary HALs, I'd much rather have a binary vendor HAL from a quite supporting vendor rather than no vendor support AT ALL (as is the case with my ACX1xx wireless cards project, http://acx100.sf.net).

Regarding "the only cards that I'm aware of that support 802.11A or 802.11G that can work on BSD or Linux are those based on the Atheros chipset":

Well, you already wrote it defensively, and for a very good reason: it's untrue ;-)

As long as you write "work on BSD *or* Linux" (and not *both*) my project fulfills these requirements, since the ACX111 (TNETW1130) 802.11g cards work quite reliably on Linux (minus WEP support, which I should have implemented months ago - sorry guys), DESPITE completely unavailable vendor support.

Also, this claim sounds very dubious to me in general. I'm far from informed about this, but I'd bet my underwear that there are at least two more 802.11g chipsets (semi-)supported.

Oh, maybe you meant *builtin* kernel support? - in this case my project doesn't qualify (yet) after all, since it will be included in few months only.

Thanks for a good thought-provoking article!

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/281/29380#29380
Closed Source Hardware - Clarifications 2004-12-07
Jason V. Miller (Author)
Closed Source Hardware 2004-12-07
Mace Moneta (1 replies)
Closed Source Hardware 2004-12-07
Jason V. Miller (Author)
Closed Source Hardware (and software) 2004-12-07
GreyGeek (1 replies)
Closed Source Hardware 2004-12-07
lsi
Jailing a driver 2004-12-07
Jack Carroll







 

Privacy Statement
Copyright 2007, SecurityFocus