And what about those BIOS/EFI[1] firmware-based hypervisor rootkits? If someone is able to gain root access in a given system that is somehow "vulnerable" in such way that a permanent EFI (or similar) rootkit can installed, then you'll be fucked even with the read-only media and all.

Speaking of which, I don't understand why manufacturers are so eagerly adding all this new intelligence into the firmware. What do we need it for anyway? IMO it would be so much simpler from security perspective, if the OS would be at the bottom of it all. Added complexity adds new possibilities for exploitation.

[1] http://en.wikipedia.org/wiki/Extensible_Firmware_Interface

Well, considering that many widely used browsers don't even implement many of CSS 2.1 features correctly (or at all)[1], that might be just a daydream.

[1] http://www.quirksmode.org/css/contents.html

When these filesystems actually have matured enough to NOT have at least dozen bugfix changesets in each revision of kernel Changelog. Even ext3fs has received few rather interesting corner-case fixes this year, so maybe ext4 will be reliable in 5 years or so.

So, as usual, they are asking for an solution that is impossible to implement, at least in any meaningfully reliable way. I mean, how does one sanely "detect" child pornography or any other illegal content to begin with?

Despite these insurmountable odds, I am fairly certain that there will be a long line of companies willing to try and do some half-assed gadgets, because there will be lots of money involved.