Comment Re:Chromebooks - highly secure (Score 1) 49
I'm curious what you mean by "Firmware" and "Microcode". The way you describe this seems to indicate you think rolling back to previous a signed release is a huge problem.
If by Firmware you mean the BIOS/bootloader, then I am pretty sure that by "rolling back" you would typically not overall impact the operation of the operating system that is booted by the old firmware. If there is some vulnerability in the firmware, you may be able to exploit it to boot something malicious, perhaps, but I think you would have trouble using it productively due to the signed OS filesystem.
If by this rollback you mean the OS image, then one is easily able to determine that an old image is being used. Whenever I have rolled back on ChromeOS, I have always had all my user data wiped too, so you haven't actually obtained access to anything by rolling back the OS Image.
I am genuinely interested in the use case you are concerned about, because in my research and use of chromeos (which has been ever since it came out), I have found the security of it to be top-notch. The team who made it and maintains it has genuinely thought through the concerning use cases and mitigated them well. Some corner cases have not been addressed, but I have found that when they are not a big concern for the ChromeOS team, they typically are not a concern for me either.
Now, this may sound like I love Google, which is not the case either. Their business practices, especially as of late, have been very concerning. However, I still stand by my original statement that I think Chromebooks (and ChromeOS in general) is a very well designed and secured system.