Firmware attacks like in this article are why the Heads tamper-evident BIOS is so important. With Heads the *user* is empowered to inspect, reproducibly build and reflash themselves instead of anchoring all trust in a vendor.

@kylerankin Related to this, a few months ago I wrote a post that details some of the steps @Puri_sm takes to protect the digital supply chain:

Sign in to participate in the conversation

Server run by the main developers of the project 🐘 It is not focused on any particular niche interest - everyone is welcome as long as you follow our code of conduct!