public inbox for gentoo-user@lists.gentoo.org
 help / color / mirror / Atom feed
From: "Taiidan@gmx.com" <Taiidan@gmx.com>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] Re: CPU upgrade and LVM questions.
Date: Mon, 10 Dec 2018 16:33:10 -0500	[thread overview]
Message-ID: <aa01ed61-b2df-aa0b-eebd-4dbef2e8f594@gmx.com> (raw)
In-Reply-To: <AFB95BD7-8F5E-4496-9312-51412A0FF3E0@antarean.org>

On 12/09/2018 01:57 PM, J. Roeleveld wrote:
> On December 9, 2018 6:23:07 PM UTC, "Taiidan@gmx.com" <Taiidan@gmx.com> wrote:
>> On 12/07/2018 06:47 PM, Nikos Chantziaras wrote:
>>> On 07/12/2018 09:30, Dale wrote:
>>>> Nikos Chantziaras wrote:
>>>>> If you want to see all of the installed packages that are affected,
>>>>> you need to set CPU_FLAGS_X86 to an empty string:
>>>>>
>>>>>    CPU_FLAGS_X86=""
>>>>>
>>>>> and then do "emerge -puDN --with-bdeps=y @world". This is because
>>>>> CPU_FLAGS_X86 is not empty by default. It contains sse and sse2 by
>>>>> default, because these are supported by all 64-bit CPUs.
>>>>>
>>>>
>>>> What I did, I commented out the whole line and ran it that way.
>>>
>>> If you comment it out, it will have default values. If you set it to
>> an
>>> empty string, you should be able to see which packages make use of
>> the
>>> default flags (like sse and sse2.)
>>>
>>> Note it's a pretend emerge (-p). Just to check which packages you
>> have
>>> installed that make use of these flags.
>>>
>>>
>>>> One last question for anyone who has done this recently.  When
>> finished,
>>>> I'll have a FX-8350 CPU with 8 cores at 4.0/4.2GHz, 32GBs of memory
>> all
>>>> on a Gigabyte 970 series mobo.  Would there be any point in
>> upgrading to
>>>> a whole new rig or is what I have about as fast is reasonable to
>> build?
>>>> I don't do gaming or anything.  Even the GTX 650 video card is
>> likely
>>>> overkill for what I do here.  The older 200 series card is working
>> just
>>>> fine.  On one hand, my current build is several years old.  On the
>>>> other, computers seem to have reached their peak.  I'm sure there is
>>>> more powerful systems out there but would I be any better off with
>> one?
>>
>> Since the AM3+ and its C32/G34 Opteron counterparts are the last and
>> best x86 cpus without ME/PSP I would say you are better off with what
>> you have - the best piledriver cpus like the FX-8350+ are still able to
>> play the latest games and in a VM via IOMMU-GFX if you want.
>>
>> In any case I would consider a OpenPOWER (ppc64/ppc64le) arch system
>> (like the blackbird or talos 2) as an upgrade path instead of any
>> futher
>> x86 stuff as there aren't any black boxes, there is
>> documentation+firmware sources and the cpus are made in usa.
> 
> Made in USA isn't necessarily a good thing when talking about not wanting any hidden back doors.

Hell of a lot better than buying black box hardware from china.

x86 is definitely backdoored due to the ME/PSP and various other DRM
features that mean you no longer own your x86 computer.

In the US you aren't going to prison for telling the government you
won't put a backdoor in your hardware whereas in china and many others
you would go to jail without even a trial even in western europe people
are jailed for saying the wrong things on the internet. It is currently
the hardest place for an authority figure to lean on you.

Since the only users of POWER are fortune 500's and the government
itself it needs to be secure and not fucked around with, ironically the
chinese government is buying OpenPOWER now as they want a secure, owner
controlled, highly documented and non-x86 high performance CPU (there is
absolutely no hardware code signing not even for the cpu microcode and
no blobs are required for hardware initiation unlike with new x86 stuff)

One doesn't have to put an actual func_backdoor backdoor in a CPU since
something so complex will have exploitable bugs that even the
manufacturer doesn't know about such as the (fixed via microcode) 2014
AMD Piledriver NMI to root exploit where you could get root and SMM
access from a tiny userspace script and that was in there for years
without anyone noticing.

> Not sure which country would be a reliable location though, I wouldn't trust Western European countries either.

USA is currently the best option since there have never been proven
backdoors in made in usa hardware but plenty in chinese made hardware
such as the recent motherboard hack chip scandal.


  parent reply	other threads:[~2018-12-10 21:33 UTC|newest]

Thread overview: 69+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-12-06  9:27 [gentoo-user] CPU upgrade and LVM questions Dale
2018-12-06 10:03 ` Neil Bothwick
2018-12-06 15:17   ` Dale
2018-12-06 16:51   ` J. Roeleveld
2018-12-06 18:36 ` Corbin Bird
2018-12-06 20:58   ` Dale
2018-12-06 21:24     ` Jack
2018-12-06 21:55       ` Dale
2018-12-07  1:06     ` Corbin Bird
2018-12-07  1:17       ` Dale
2018-12-07  5:10         ` Dale
2018-12-07  6:22           ` [gentoo-user] " Nikos Chantziaras
2018-12-07  7:30             ` Dale
2018-12-07 10:49               ` Alec Ten Harmsel
2018-12-07 23:47               ` Nikos Chantziaras
2018-12-07 23:59                 ` Dale
2018-12-09 18:23                 ` Taiidan
2018-12-09 18:57                   ` J. Roeleveld
2018-12-09 22:41                     ` Dale
2018-12-10 21:33                     ` Taiidan [this message]
2018-12-10 22:14                       ` Neil Bothwick
2018-12-10 22:54                         ` Dale
2018-12-11  2:00                           ` Taiidan
2018-12-11  8:49                             ` Neil Bothwick
2018-12-11  9:23                               ` Mick
2018-12-11 10:48                               ` Dale
2018-12-11 15:14                                 ` J. Roeleveld
2018-12-11 22:46                               ` Adam Carter
2018-12-11 23:56                                 ` Dale
2018-12-12  2:15                                   ` Adam Carter
2018-12-11 10:20                             ` Alan Mackenzie
2018-12-11 15:03                             ` J. Roeleveld
2018-12-07  8:47         ` [gentoo-user] " Neil Bothwick
2018-12-07  8:58           ` Dale
2018-12-06 21:02 ` [gentoo-user] " Nikos Chantziaras
2018-12-06 21:45   ` Dale
2018-12-06 22:22     ` Nikos Chantziaras
2018-12-06 23:23       ` Dale
2018-12-06 23:40         ` Nikos Chantziaras
2018-12-07  0:19           ` Dale
2018-12-07 10:01             ` Peter Humphrey
2018-12-07 12:41               ` Dale
2018-12-07 16:51                 ` Peter Humphrey
2018-12-08  1:01                   ` Dale
2018-12-08  2:51                     ` Nikos Chantziaras
2018-12-08  4:39                       ` Dale
2018-12-08  5:33                       ` David Haller
2018-12-08  5:45                         ` Dale
2018-12-08  6:00                         ` Nikos Chantziaras
2018-12-08  6:28                           ` David Haller
2018-12-08  4:23                 ` David Haller
2018-12-08  5:35                   ` Dale
2018-12-08  6:06                     ` David Haller
2018-12-08  5:38                   ` David Haller
2018-12-08  9:40                     ` Peter Humphrey
2018-12-08  9:50                       ` Peter Humphrey
2018-12-06 21:03 ` [gentoo-user] " Grant Taylor
2018-12-09 22:45   ` Dale
2018-12-10  1:35     ` Grant Taylor
2018-12-10  2:38       ` Dale
2018-12-10  3:37         ` Grant Taylor
2018-12-10  9:27         ` Neil Bothwick
2018-12-10 16:00           ` Dale
2018-12-08 17:49 ` Alexander Puchmayr
2018-12-08 18:23   ` Dale
2018-12-08 19:09     ` J. Roeleveld
2018-12-08 20:48       ` Dale
2018-12-11 10:41 ` Dale
2018-12-22 23:58 ` Dale

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=aa01ed61-b2df-aa0b-eebd-4dbef2e8f594@gmx.com \
    --to=taiidan@gmx.com \
    --cc=gentoo-user@lists.gentoo.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox