Still fresh, damnit!
- Oct 6, 2008
- Somewhere off the coast of the EU
If you can boot from an SD card you trust, yes you could use that to read the internal eMMC, verify checksums and reflash if necessary. That may be the best defence the Pyra offers against "evil maid", and that is a way easier procedure than with most laptops, which unconditionally boot from internal SPI flash *before* you can boot from any external drive (malware could already be running while you try to verify or reflash).
Technically, the Pandora always initialises off code in the internal flash which supports SD cards as well as ubifs and is able to load and pass the process counter off to code from any source. To bootstrap any system you need to first run something that can grok SD cards before you can boot off an SD card, and that code could theoretically be malicious.