{
"$type": "site.standard.document",
"bskyPostRef": {
"cid": "bafyreiht5bvevy6p3dexecqb7ps5kue6j4vgp4hk3ghjw6vqcesyqakfa4",
"uri": "at://did:plc:b3tz6srl4ochk2wxn6dv6xpy/app.bsky.feed.post/3mg6eeipn5mf2"
},
"path": "/Articles/1061048/",
"publishedAt": "2026-03-03T14:41:43.000Z",
"site": "https://lwn.net",
"tags": [
"examines the factors"
],
"textContent": "Matthew Garrett examines the factors that go into the decision about whether to install a firmware update or not.\n\n> I trust my CPU vendor. I don't trust my CPU vendor because I want to, I trust my CPU vendor because I have no choice. I don't think it's likely that my CPU vendor has designed a CPU that identifies when I'm generating cryptographic keys and biases the RNG output so my keys are significantly weaker than they look, but it's not literally impossible. I generate keys on it anyway, because what choice do I have? At some point I will buy a new laptop because Electron will no longer fit in 32GB of RAM and I will have to make the same affirmation of trust, because the alternative is that I just don't have a computer.",
"title": "Garrett: To update blobs or not to update blobs"
}