Live data from Hacker News

LVFS – Linux Vendor Firmware Service

fwupd.org

31–40 of 67 posts

Re: LVFS – Linux Vendor Firmware Service

#31
fwupdmgr is amazing.

It’s like a package-manager for system firmware. For the devices supported, it feels infinitely better than downloading random files from the various vendor-sites on the internet and running setup wizards and all kinds of bloated inconsistent nonsense.

I’d argue fwupdmgr actually represents something objectively done better on Linux than Windows, and my only complaint overall is that not enough vendors are supporting it.

Re: LVFS – Linux Vendor Firmware Service

#32

Amazing project! It's incredibly well engineered, imo. It's really nice to read the author's blogposts describing how he forces hardware vendors to get their shit together and either use a standardized update mechanism or create a thoroughly tested open source plugin. I remember the first time I got a Dell laptop and put Ubuntu on it, GNOME Software immediately prompted me to install a firmware update. I was so amaze…

blush -- my blog is https://blogs.gnome.org/hughsie/ for the important stuff, and https://mastodon.social/@hughsie is for the inane stuff.

Re: LVFS – Linux Vendor Firmware Service

#33
post #29

Don't know much about it yet, and it is undoubtedly is a useful service. However looking at that page boasting telemetry and noticing an always running fwupd process running here as root it looks like this is probably leaking information thru its comm channel. Does anyone know why this is running 24/7? I don't expect my firmware to be changing minute to minute. I need to get OpenSnitch running to keep an eye on these…

Oh no "leaking telemetry". Heavens. I think what yesterday's SSD discussion revealed is that an open database of "leaked" SMART data would be of immense value to users and should have happened years ago. It sucks that privacy derangement vetoes the development of things of real value.

[deleted]

Re: LVFS – Linux Vendor Firmware Service

#34
As a hardware developer lvfs and fwupd is amazing. It has support for all kinds of standard update protocols. So if you build a product and use a standardized update mechanism, it is super easy to get updates on lvfs.

The other thing that is great is the testing and validation groups allows you to setup target groups so you can fully validate your updates internally before staging rollouts.

Also @hughsient is really responsive at fixing issues.

We use fwupd at Framework Computer.

Re: LVFS – Linux Vendor Firmware Service

#35
post #11

Earlier quoted context omitted.

"Major" = RHEL, Fedora, Ubuntu, Debian, perhaps also Arch. Slackware is niche, sorry.

Arch is the new “big” distro among Linux gamers. It seems to be taking market share from Ubuntu. And yes, fwupdmgr works fine on Arch too.

Also the Steam Deck is Arch derived, so I think there's a good chance after this year that Arch is actually the most common desktop Linux family.

Re: LVFS – Linux Vendor Firmware Service

#36
post #29

Don't know much about it yet, and it is undoubtedly is a useful service. However looking at that page boasting telemetry and noticing an always running fwupd process running here as root it looks like this is probably leaking information thru its comm channel. Does anyone know why this is running 24/7? I don't expect my firmware to be changing minute to minute. I need to get OpenSnitch running to keep an eye on these…

Oh no "leaking telemetry". Heavens. I think what yesterday's SSD discussion revealed is that an open database of "leaked" SMART data would be of immense value to users and should have happened years ago. It sucks that privacy derangement vetoes the development of things of real value.

I'll decide that for myself, you insensitive clod!

I can imagine your future assault robbery trial. "But your honor, stealing his wallet was good for him! Couldn't get into the bar that night and gave his liver a well-needed break." :-D

Re: LVFS – Linux Vendor Firmware Service

#37

Don't know much about it yet, and it is undoubtedly is a useful service. However looking at that page boasting telemetry and noticing an always running fwupd process running here as root it looks like this is probably leaking information thru its comm channel. Does anyone know why this is running 24/7? I don't expect my firmware to be changing minute to minute. I need to get OpenSnitch running to keep an eye on these…

> this is probably leaking information thru its comm channel It's really not. The fwupd process doesn't have any internet access at all -- all communication is done through a socket over DBus. All the telemetry is done with the user explicitly opting in -- we even show the JSON in the terminal that is going to be sent. > Does anyone know why this is running 24/7 We auto-quit on idle or for low memory conditions -- un…

Good to know. Why is it a root daemon and not a command/library if other tools are directing it? If I had to guess, so the end user does not have to elevate to superuser to initiate actions?

Re: LVFS – Linux Vendor Firmware Service

#38

Don't know much about it yet, and it is undoubtedly is a useful service. However looking at that page boasting telemetry and noticing an always running fwupd process running here as root it looks like this is probably leaking information thru its comm channel. Does anyone know why this is running 24/7? I don't expect my firmware to be changing minute to minute. I need to get OpenSnitch running to keep an eye on these…

On the bright side, you can finally mask it in latest Fedora without Software store going haywire and spamming you with useless error messages about it being unavailable.

Still waiting for that to arrive in next Debian…

I’m sure it’s useful to Dell users, but not much to anyone with DIY setups.

Re: LVFS – Linux Vendor Firmware Service

#39
post #29

Don't know much about it yet, and it is undoubtedly is a useful service. However looking at that page boasting telemetry and noticing an always running fwupd process running here as root it looks like this is probably leaking information thru its comm channel. Does anyone know why this is running 24/7? I don't expect my firmware to be changing minute to minute. I need to get OpenSnitch running to keep an eye on these…

Oh no "leaking telemetry". Heavens. I think what yesterday's SSD discussion revealed is that an open database of "leaked" SMART data would be of immense value to users and should have happened years ago. It sucks that privacy derangement vetoes the development of things of real value.

> privacy derangement

Are you using this to refer to the attitude of companies that want to collect as much data as possible whether or not they have a clear and good use for it, or the attitude of users who are no longer willing to trust large-scale data collection efforts?

Post reply on HN