News for hackers. Stuff that matters.
Re:Installing Windows 11 on Legacy BIOS Without Secure Boot by michaelmrose on Sunday June 27, 2021 @02:56PM (#27654189)
When trusted computing was first discussed everything but the "trusted" browser blocking a particular website was discussed as a feature not a threat model and you can absolutely see how many consumer devices are currently locked down in just such a fashion.

Accessing the tpm doesn't mean what you think it means. You can't by design get the key out of the tpm nor necessarily control which keys are trusted by local software nor remote machines.

Control of what software is allowed to run is ultimately control over everything else because one kind of control gives you every other variety. The fact that you can disable secure boot or control which keys are trusted is a nicety that could be withdrawn next year along with your ability to run Linux.

Your vendor approved software can then implement any sort of restrictions it pleases and remotely attest to the efficacy of such restrictions.

Yes sir mr Amazon sir user id running trusted windows 11 and can't save or share this video as per your contract with Disney nor are they allowed to view any known pirate sites or sites that look like pirate sites according to our heuristics.

Alternatively. Please upgrade to a trusted windows 11 machine to view this content.

https://www.gnu.org/philosophy/can-you-trust.en.html

Re:Installing Windows 11 on Legacy BIOS Without Secure Boot by staticassertion on Sunday June 27, 2021 @11:31PM (#27657812)
> You can't by design get the key out of the tpm nor necessarily control which keys are trusted by local software nor remote machines.

I know this... I've even repeatedly stated as such in this thread.

The rest of your post is just a silly hypothetical and frankly linking gnu is just discrediting.

Re:Installing Windows 11 on Legacy BIOS Without Secure Boot by michaelmrose on Monday June 28, 2021 @12:22AM (#27658115)
It's not silly hypothetical there have already been devices that used secure boot to lock out alternative OS and allowing third parties a say in what software is run is literally the entire point of remote attestation.

The last sentence is particularly disappointing. The article's analysis is correct and not particularly complicated it stands on its own regardless of whatever bias you possess.

Re:Installing Windows 11 on Legacy BIOS Without Secure Boot by staticassertion on Monday June 28, 2021 @02:25AM (#27658695)
Let's not throw words like 'bias' around when linking to Stallman.

> allowing third parties a say in what software is run is literally the entire point of remote attestation

No it isn't.

We're clearly of two very different minds, there's no way we're finding common ground on this, and I've already done the work of explaining to many people what TPM technology is, so I feel like I've done my part.