News for hackers. Stuff that matters.

A comment on Intel x86 Root of Trust: Loss of Trust. Parent comment

Re:Intel x86 Root of Trust: Loss of Trust by ghostpepper on Thursday March 05, 2020 @04:09PM (#22498284)
What about the fact that the newest Intel CPU that can run Coreboot is from 2012 since all the subsequent ones have been locked by Intel? Isn't the TPM directly responsible for loss of that freedom to tinker?
[ Parent | on HN ]
Re:Intel x86 Root of Trust: Loss of Trust by wmf on Thursday March 05, 2020 @04:17PM (#22498388)
Coreboot runs on the latest Intel CPUs (and work is underway for CPUs that haven't even been released yet) but it uses binary blobs. Those blobs have nothing to do with TPMs, the ME, or whatever.
[ Parent | on HN ]
Re:Intel x86 Root of Trust: Loss of Trust by floatboth on Thursday March 05, 2020 @05:20PM (#22498966)
As already mentioned the coreboot bit is false, but also:

the TPM is a PASSIVE component. It only responds to your requests and you can do cool things with it.

https://media.ccc.de/v/36c3-10564-hacking_with_a_tpm

[ Parent | on HN ]
Re:Intel x86 Root of Trust: Loss of Trust by mokus on Thursday March 05, 2020 @11:06PM (#22500912)
Just a few months ago I bought a comet lake laptop that shipped with coreboot, so I have no idea what you’re talking about here.
[ Parent | on HN ]