Bonum Certa Men Certa

FSF's Alex Oliva on Hardware Black Boxes

posted by Roy Schestowitz on Feb 26, 2026

Alexandre Oliva

Reprinted with permission from Alex Oliva.

Pondering about the true nature of the soul of hardware components (whether they're software or hardware) doesn't strike me as a useful way to reason about whether hardware is usable in software freedom.

Hardware is typically a black box. It's inescapable that, at some level, the machine will do what its designer made it to do, and there's nothing inherently wrong (as in unethical) about that.

Moreover, there's no expectation that you could be able to change it at that level, for it could be all hardware circuits, that are impossible to modify. Even if you could build another machine or component with the desired change, that wouldn't modify the original machine or component. There's no ethical imperative for that.

Even when you have access to its specifications and source code, which parts got compiled to hardware circuits and which were compiled into instructions for a general- or special-purpose programmable component is immaterial and irrelevant to tell whether the machine is usable in software freedom.

It's a black box. It could range from all hardware to a qemu layer on top of all hardware or of a qemu layer on top of... If you watched Inception, you get the idea. Or maybe not ;-)

As with AGPLed software on a remote server, even with specifications and source code, you can't generally tell whether there are undisclosed malicious or undesirable features omitted from the sources.

Just as you can't generally tell whether friends really like you or just pretend to. It's the nature of black boxes, and if you worry too much about it, you may end up without friends, and without hardware.

Sure, if they exhibit malicious behaviors, you probably don't want them in your life.

For purposes of software freedom and ethics, what matters for programmable hardware is whether the machine is faithful to its programming model. If it takes your instructions and carries them out, you can use it as a black box for your computing in (software) freedom, whether the machine is on-premises hardware or a remote virtual machine.

Now, if you can tell that it takes instructions and commands from others, or sends information to others, this is outside the black box, and then there may be grounds for suspicion that those behaviors may be malicious, even if they don't directly interfere with the exposed programming model.

Software components outside the hardware black box bring with them an ethical issue that is not present in components inside the black box: they are visibly and indisputably software, and as such, you deserve control over what they do to your machine, even if what they do isn't properly your own computing. (I mention this because the fundamental guiding principle of free software philosophy is that you deserve control over the software you use to do your own computing; this goes a little beyond that.)

Being clearly outside the black box, these software components are not covered by the inescapable nature of hardware, not even theoretically: they're indisputably software, and software is executable and modifiable and shareable unless someone prevents you from doing these things by unethical means.

This post is about ethics, the core issue for free software, not about other issues such as security. For other issues, opening the black box may be important, whether it's software or hardware.

So blong, █


The following catch-all copyright notice and permission apply to all documents and postings in this blog that don't contain a copyright notice of their own, and whose copyright can be reasonably assumed to be held by Alexandre Oliva.

Copyright 2007-2026 Alexandre Oliva

Permission is granted to make and distribute verbatim copies of this entire document worldwide without royalty, provided the copyright notice, the document's official URL, and this permission notice are preserved.

The following licensing terms also apply to all documents and postings in this blog that don't contain a copyright notice of their own, or that contain a notice equivalent to the one above, and whose copyright can be reasonably assumed to be held by Alexandre Oliva.

This work is licensed under the Creative Commons License BY-SA (Attribution ShareAlike) 3.0 Unported. To see a copy of this license, visit http://creativecommons.org/licenses/by-sa/3.0/ or send a letter to Creative Commons, 444 Castro Street, Suite 900, Mountain View, California, 94041, USA.


Image source: Alexandre Oliva


Other Recent Techrights' Posts

The World Needs Activists With Social Skills and Perseverance
An everyday activist makes life better for everybody, everywhere (not for personal gain or even credit)
Intercontinental Brigading - Part XI - Losing Over a Million Pounds (Borrowed Money) to Try to Silence Critics of Restricted Boot With Microsoft-Controlled "Certificates"
Garrett is also very jealous of Daniel Pocock
 
Links 22/10/2026: MElon (Elon Musk) Election Interference and Perl/Raku Foundation by the Numbers
Links for the day
Techrights Audience Grew as a Function of the Intensity of Attacks on Its Existence
We try to publish fewer stories but better (not necessarily long but at least important) stories
TechRepublic is Becoming a Slopfarm
It seems like TechRepublic became LLM slop (maybe all of it, maybe only some of it for now)
Techrights is Not About GNU/Linux, Tux Machines Is
When we say "GNU/Linux" we emphasise the GNU
Intercontinental Brigading - Part XII - Lawfare to Cover Up Microsoft's Restricted Boot Calamity (Microsoft as Authority Over Linux), Garrett Wants to Talk About Penises Instead
When lawsuits become a political weapon
Without Microsoft's Monopoly (and Monopoly Rents) the Inevitable Microsoft Mass Layoffs Carry on Endlessly
Microsoft Windows is not retaining the dominance it once had
IBM's Debt Grew About $2 Billion in 3 Months
The silent layoffs still seem to impact Red Hat
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, October 22, 2026
IRC logs for Thursday, October 22, 2026
Gemini Links 22/10/2026: Solar MiniBBS, Building Major Tom, and Zig
Links for the day
Links 22/10/2026: Busan’s Celebrity Shark in Canal Again
Links for the day
Links 22/10/2026: "Software Developers Have Been Promoted Into Incompetence"
Links for the day
Links 22/10/2026: eBay to Lay Off a Tenth of Staff (Again), Node.js and PHP Security Crises, Climate News
Links for the day
Red Hat Layoffs Still Going on This Week (Whilst IBM's Debt Grows in Spite of Mass Layoffs)
IBM is bluffing/cheating the shareholders again
IBM's Debt Continues to Increase While the Company Rapidly Shrinks
This is what a dying company looks like
Linux Kernel Needs Diversity and Diversity of Good Code, Not LLM Slop
Linux (and Linus) are kicking a can down the road
Microsoft Shrinks Every Year
Microsoft will try to spin or twist this as "efficiency"
Gemini Links 22/10/2026: Holiday Inn and Emacs
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, October 21, 2026
IRC logs for Wednesday, October 21, 2026
Techrights Was Right About a Fake Security Model Built Around Lies or Built Upon Trust in "Certificates" and "Authorities" (like Microsoft)
We have begun to amass some media reports and blog posts from technical sites
Windows Monopoly is No Longer Sustainable (the Case of Oceania)
This is why Microsoft layoffs are happening all the time
Some Downtime Possible Shortly (Router Work)
We don't use PHP in the site anymore
Mass Layoffs at Microsoft This Week and/or Next Week
Cannot pull a bunny out of some hat
With Its Future on the Line, EPO Management (Dictatorship) Resorts to Further Escalations to Fake 'Production' and Curtail Industrial Actions
It's clear that with a yearlong campaign of industrial actions - including strikes - Campinos cannot save face anymore
Gemini Links 21/10/2026: Summer Day in Tokyo (30c in Late October) and Whole Food for the Whole World
Links for the day
Links 21/10/2026: "Zelensky Took the Gloves Off This Time With Convicted Felon" and "Cellebrite iPhone Radio Zero-Day"
Links for the day
Reuters is Becoming Slop, Not a News Agency (Treat Reports From Reuters Sceptically)
In their own words
Disclosure/s Crisis at The Register MS (Promoting a Ponzi Scheme for Money)
So now they sell several schemes/scams at the same time, not limited to the slop
Links 21/10/2026: "The Tragic Death of the Republican Party" and "No War But Data Center War"
Links for the day
Internet Relay Chat Still Growing
The numbers go up, not down [...] Don't believe the doomers
Intercontinental Brigading - Part X - American Back Doors Inside Our Computers, With Transatlantic Swatting Against Critics Thrown 'Into the Mix'
"If your Windows PC's Secure Boot certificates are out of date, your system is vulnerable to malware like rootkits."
Gemini Links 21/10/2026: A Walk Through Amsterdam and Pythagorean Theorem
Links for the day
More Mass Layoffs at Microsoft Weeks From Now, Then Again Months From Now
Microsoft's crisis is not limited to XBox
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, October 20, 2026
IRC logs for Tuesday, October 20, 2026