Mark Shuttleworth Calls For An End To ACPI
Mark Shuttleworth has called for an end to ACPI (the Advanced Configuration and Power Interface) and other executable firmwares that could prove to be attack vectors on PCs, phones, and other devices.
Mark wrote in his latest blog post, "we DO live in an era where any firmware code running on your phone, tablet, PC, TV, wifi router, washing machine, server, or the server running the cloud your SAAS app is running on, is a threat vector against you...Arguing for ACPI on your next-generation device is arguing for a trojan horse of monumental proportions to be installed in your living room and in your data centre. I’ve been to Troy, there is not much left."
Mark wants Ubuntu to be part of fixing security problems with firmwares and is calling for greater innovation within the upstream Linux kernel to not be dependent upon ACPI and older, less-secure interfaces. Mark is also calling for a declarative firmware that doesn't include executable code.
Mark isn't committing to some new technology right now, investing in such new work themselves, or making other progress at this time, but just talking up the need for change. Those interested in reading Mark's latest round of thoughts can find his views via this blog post.
Mark wrote in his latest blog post, "we DO live in an era where any firmware code running on your phone, tablet, PC, TV, wifi router, washing machine, server, or the server running the cloud your SAAS app is running on, is a threat vector against you...Arguing for ACPI on your next-generation device is arguing for a trojan horse of monumental proportions to be installed in your living room and in your data centre. I’ve been to Troy, there is not much left."
Mark wants Ubuntu to be part of fixing security problems with firmwares and is calling for greater innovation within the upstream Linux kernel to not be dependent upon ACPI and older, less-secure interfaces. Mark is also calling for a declarative firmware that doesn't include executable code.
Mark isn't committing to some new technology right now, investing in such new work themselves, or making other progress at this time, but just talking up the need for change. Those interested in reading Mark's latest round of thoughts can find his views via this blog post.
34 Comments