Hacker News Reader

I used to think that as well but IOMMU is a thing now. Read strcat's posts, they're really informative. He's the developer of GrapheneOS.

https://news.ycombinator.com/threads?id=strcat

View on HN

The IOMMU that is subservient to the cell modem, where the latter runs code of unknown provenance with the ability for ad-hoc, targeted updates over the network?

Isn't the modem one of the things isolated by the IOMMU? How is it subservient to it?

Your IOMMU needs to be programmed, just like your MMU. Programming is provided by the OS and driver. Early IOMMU configuration is provided by the firmware. Check mate.

https://news.ycombinator.com/item?id=20151431

> It can't improve the security of firmware directly, but it can certainly improve the isolation of it by auditing and improving IOMMU configuration

Reply on news.ycombinator.com