This is such a stupid argument I cant believe you’re even trying to make the case. I’ll pick a common enterprise device the HP zbook firefly. NXP NFC NPC300 Proximity Driver - Its had 5 OEM driver updates in the past 4 years on windows. Meanwhile the NXP linux_libnfc-nci repo which is NXP’s OEM repo is wildly out of date and looks borderline dead. I checked the kernel tree and there are “common” patches under drivers/nfc/nxp-nci that include support for the NPC300 but these dont match up with the patches that are released for windows and dont seem to be specific fixes to address CVE issues.
Here we can see the tests that fwupd has done to verify the device firmware. As you can see its missing a lot of functionality. This is a linux supported device apparently. If its missing this much I can only imagine how bad other devices are. Keep in mind this is only checking the working functionality and is not checking to see if the patches are up to date to protect against the latest CVEs. On windows HP has released 22 patches in the last 5 years with the latest patch containing fixes for 12 CVEs. Meanwhile on linux im not sure if HP has even released a single complete patch for this device let alone constant updates to fix the CVEs.
I’m currently working on getting our device fleet in order for EU Gov contract compliance and a fleet of these devices would instantly disqualify us. I love linux but we have work to do and being ignorant to the issues doesnt help anything.
The linux kernel has good support for server hardware like, drive controllers, network cards, etc but bad support for things like touchpad, bluetooth, fingerprint readers, cameras, nfc readers, wifi cards, power controllers.
There are a small handful of laptop devices that have “full driver support” and these are still a 3rd party managing the linux drivers framework, system 76, lenovo. This is usually fixing issues as they arise instead of releasing fixes and patches before the disclosed issues go public. That makes them really hard to support in a secure environment.
If there are majority of devices then give me one machine thats not a framework or system 76 laptop and we can look at the device drivers.
Auth@lemmy.world 2 weeks ago
This is such a stupid argument I cant believe you’re even trying to make the case. I’ll pick a common enterprise device the HP zbook firefly. NXP NFC NPC300 Proximity Driver - Its had 5 OEM driver updates in the past 4 years on windows. Meanwhile the NXP linux_libnfc-nci repo which is NXP’s OEM repo is wildly out of date and looks borderline dead. I checked the kernel tree and there are “common” patches under drivers/nfc/nxp-nci that include support for the NPC300 but these dont match up with the patches that are released for windows and dont seem to be specific fixes to address CVE issues.
Lets go less specific and take a look at fwupd for the zbook fwupd.org/lvfs/hsireports/device?host_vendor=HP&h…
Here we can see the tests that fwupd has done to verify the device firmware. As you can see its missing a lot of functionality. This is a linux supported device apparently. If its missing this much I can only imagine how bad other devices are. Keep in mind this is only checking the working functionality and is not checking to see if the patches are up to date to protect against the latest CVEs. On windows HP has released 22 patches in the last 5 years with the latest patch containing fixes for 12 CVEs. Meanwhile on linux im not sure if HP has even released a single complete patch for this device let alone constant updates to fix the CVEs.
I’m currently working on getting our device fleet in order for EU Gov contract compliance and a fleet of these devices would instantly disqualify us. I love linux but we have work to do and being ignorant to the issues doesnt help anything.
TonyTonyChopper@mander.xyz 2 weeks ago
That’s an anecdote
Auth@lemmy.world 2 weeks ago
The linux kernel has good support for server hardware like, drive controllers, network cards, etc but bad support for things like touchpad, bluetooth, fingerprint readers, cameras, nfc readers, wifi cards, power controllers.
There are a small handful of laptop devices that have “full driver support” and these are still a 3rd party managing the linux drivers framework, system 76, lenovo. This is usually fixing issues as they arise instead of releasing fixes and patches before the disclosed issues go public. That makes them really hard to support in a secure environment.
If there are majority of devices then give me one machine thats not a framework or system 76 laptop and we can look at the device drivers.