Debian uses its own version of the Linux kernel with proprietary parts removed; however, if you want to install it on a machine that does have hardware for which there are no free drivers (which is to say almost any machine out there in the market), you’ll have to install proprietary parts; in the last version, Debian 12, system does that by default.
Intel Management Engine is a CPU-level microprogram that runs with highest priority and does not have open code, so essentially every PC with Intel CPU runs some arbitrary code we cannot verify. Same for AMD Platform Security Processor by the way, so there is no simple escape.
Oh and BIOS is proprietary too, and only a few select machines can have a fully libre BIOS successfully installed on them.
Thereby even if you go to essentially libre version of Linux, there will, almost universally, be pieces of obfuscated code with no disclosure on what they’re doing there.
BIOS and ME are only two of the many proprietary things on a computer. If your hardware works without a binary blob, that only means that same blob is stored in a flash chip on the pcb of the hardware. So in the freedom-scale, it doesn’t matter whether the blob is pushed by the kernel or pulled from a flash chip - the hardware executes a proprietary firmware in any case.
Context?
Debian uses its own version of the Linux kernel with proprietary parts removed; however, if you want to install it on a machine that does have hardware for which there are no free drivers (which is to say almost any machine out there in the market), you’ll have to install proprietary parts; in the last version, Debian 12, system does that by default.
Intel Management Engine is a CPU-level microprogram that runs with highest priority and does not have open code, so essentially every PC with Intel CPU runs some arbitrary code we cannot verify. Same for AMD Platform Security Processor by the way, so there is no simple escape.
Oh and BIOS is proprietary too, and only a few select machines can have a fully libre BIOS successfully installed on them.
Thereby even if you go to essentially libre version of Linux, there will, almost universally, be pieces of obfuscated code with no disclosure on what they’re doing there.
BIOS and ME are only two of the many proprietary things on a computer. If your hardware works without a binary blob, that only means that same blob is stored in a flash chip on the pcb of the hardware. So in the freedom-scale, it doesn’t matter whether the blob is pushed by the kernel or pulled from a flash chip - the hardware executes a proprietary firmware in any case.