Thanks for your reply. There is sufficient info about which projects are official and unofficial now. There is also enough info about security although that doesn't mean I think the security is good. With an overview of RPI I can now give my opinion and suggestion.
I think the developers from the top down should spend a day learning about PGP. PGP signatures are not same thing as hash checksums. checksums just check if there are any random data modified or lost during download, it doesn't help me to know what I downloaded isn't from a hacker (or NSA/CIA forcing a supply chain attack with gag order for mass surveillance and control) instead of from the official raspberrypi team who is responsible for building the software. That's why every single OS except Raspberry Pi OS has both optional checksum and PGP files available for download next to the OS image.
I have to do a lot more research about which parts of software are still proprietary (security risk) and my first impression is that it's a big security risk when RPI builds their own microcontrollers but I will look more in-depth into it and try to stay optimistic for now. I will look into that hacker challenge you mentioned.
Security for these SBCs should be top priority considering the technological times we live in where everything about our lives is digital and how many people have smart homes where everything is controlled by computers. Don't forget that CIA used the pokemon go game to do mass surveillance on all people, even inside everyone's private home they took pictures and made maps of everything. It would be great if raspberry pi could do their best to protect us from that kind of corrupt mass surveillance usa is doing and has been doing for a long time.
I think the developers from the top down should spend a day learning about PGP. PGP signatures are not same thing as hash checksums. checksums just check if there are any random data modified or lost during download, it doesn't help me to know what I downloaded isn't from a hacker (or NSA/CIA forcing a supply chain attack with gag order for mass surveillance and control) instead of from the official raspberrypi team who is responsible for building the software. That's why every single OS except Raspberry Pi OS has both optional checksum and PGP files available for download next to the OS image.
I have to do a lot more research about which parts of software are still proprietary (security risk) and my first impression is that it's a big security risk when RPI builds their own microcontrollers but I will look more in-depth into it and try to stay optimistic for now. I will look into that hacker challenge you mentioned.
Security for these SBCs should be top priority considering the technological times we live in where everything about our lives is digital and how many people have smart homes where everything is controlled by computers. Don't forget that CIA used the pokemon go game to do mass surveillance on all people, even inside everyone's private home they took pictures and made maps of everything. It would be great if raspberry pi could do their best to protect us from that kind of corrupt mass surveillance usa is doing and has been doing for a long time.
Statistics: Posted by rpifunfun — Tue Jul 08, 2025 2:04 pm