Could you elaborate on the ways that people are being screwed over by TPM?
I do see that the existence of both trusted and untrusted systems could exert some pressure on consumers to adopt the latter, due to the unavailability of certain services on the former (e.g. DRM, banking apps on rooted Android phones etc).
The danger here is a loss of "freedom to tinker", which I do appreciate very much, and I share that concern. But has that actually happened with TPM?
Certain 4K/ HDR content is only available on PCs if you use edge.
Thats not TPM.
Re:Intel x86 Root of Trust: Loss of Trust
by ghostpepper on Thursday March 05, 2020 @04:09PM
(#22498284)
What about the fact that the newest Intel CPU that can run Coreboot is from 2012 since all the subsequent ones have been locked by Intel? Isn't the TPM directly responsible for loss of that freedom to tinker?
Coreboot runs on the latest Intel CPUs (and work is underway for CPUs that haven't even been released yet) but it uses binary blobs. Those blobs have nothing to do with TPMs, the ME, or whatever.
Re:Intel x86 Root of Trust: Loss of Trust
by floatboth on Thursday March 05, 2020 @05:20PM
(#22498966)
As already mentioned the coreboot bit is false, but also:
the TPM is a PASSIVE component. It only responds to your requests and you can do cool things with it.
Just a few months ago I bought a comet lake laptop that shipped with coreboot, so I have no idea what you’re talking about here.
Re:Intel x86 Root of Trust: Loss of Trust
by johncolanduoni on Thursday March 05, 2020 @03:55PM
(#22498122)
I'm curious, where are TPMs being used to screw people over in your opinion?
Yes they can, but as I understand it they are using TPM to screw us over, hence people celebrating its being popped. No misunderstanding of trusted computing necessary: there aren't, in practice, other vendors to choose from here.