News for hackers. Stuff that matters.

A comment on Intel x86 Root of Trust: Loss of Trust. Parent comment

Re:Intel x86 Root of Trust: Loss of Trust by lxgr on Thursday March 05, 2020 @03:47PM (#22498029)
Could you elaborate on the ways that people are being screwed over by TPM?

I do see that the existence of both trusted and untrusted systems could exert some pressure on consumers to adopt the latter, due to the unavailability of certain services on the former (e.g. DRM, banking apps on rooted Android phones etc).

The danger here is a loss of "freedom to tinker", which I do appreciate very much, and I share that concern. But has that actually happened with TPM?

[ Parent | on HN ]
Re:Intel x86 Root of Trust: Loss of Trust by hedora on Thursday March 05, 2020 @10:04PM (#22500672)
Certain 4K/ HDR content is only available on PCs if you use edge.
[ Parent | on HN ]
Re:Intel x86 Root of Trust: Loss of Trust by bepvte on Friday March 06, 2020 @03:07AM (#22501800)
Thats not TPM.
[ Parent | on HN ]
Re:Intel x86 Root of Trust: Loss of Trust by ghostpepper on Thursday March 05, 2020 @04:09PM (#22498284)
What about the fact that the newest Intel CPU that can run Coreboot is from 2012 since all the subsequent ones have been locked by Intel? Isn't the TPM directly responsible for loss of that freedom to tinker?
[ Parent | on HN ]
Re:Intel x86 Root of Trust: Loss of Trust by wmf on Thursday March 05, 2020 @04:17PM (#22498388)
Coreboot runs on the latest Intel CPUs (and work is underway for CPUs that haven't even been released yet) but it uses binary blobs. Those blobs have nothing to do with TPMs, the ME, or whatever.
[ Parent | on HN ]
Re:Intel x86 Root of Trust: Loss of Trust by floatboth on Thursday March 05, 2020 @05:20PM (#22498966)
As already mentioned the coreboot bit is false, but also:

the TPM is a PASSIVE component. It only responds to your requests and you can do cool things with it.

https://media.ccc.de/v/36c3-10564-hacking_with_a_tpm

[ Parent | on HN ]
Re:Intel x86 Root of Trust: Loss of Trust by mokus on Thursday March 05, 2020 @11:06PM (#22500912)
Just a few months ago I bought a comet lake laptop that shipped with coreboot, so I have no idea what you’re talking about here.
[ Parent | on HN ]