pan...@disroot.org writes:

> I urge Debian to rethink its decision to officially include non-free
> firmware and correct the social contract. Instead of making non-free
> firmware the default, Debian should ensure that users consciously
> choose to install it while being made aware of the implications.

I agree and would personally come back to use Debian on some of my
laptops if there was a supported way to install Debian from official
installer images that did not promote non-free software by including
firmware on them.

The recent AMD Microcode vulnerability is a good case-study on the
dangers of permitting non-free code to run on your CPU:

https://bughunters.google.com/blog/5424842357473280/zen-and-the-art-of-microcode-hacking

There is no way for me as a user to audit that the Debian installer
images is not including vulnerable microcode, since source code for the
firmware is not available.

My perception is that the Debian developer community rejected this, and
I'm not sure people are ready to reconsider just yet (the trend seems to
be the opposite way).  Fortunately there are good libre alternatives in
Trisquel and Guix available for recommendation meanwhile.

/Simon

Attachment: signature.asc
Description: PGP signature

Reply via email to