Re:Technical Introduction to the Use of Trusted Platform Mod...
by pengaru on Thursday July 22, 2021 @02:52PM
(#27922747)
Too late to edit, but forgot to mention the DT2000 also supports a read-only mode. So if desired, in regular usage for boot purposes, it's not writable. It then needs to explicitly be switched to read-write via the keypad when performing kernel/initrd updates, if configured as such.
[ Parent
| on HN ]
Re:Technical Introduction to the Use of Trusted Platform Mod...
by vinsci on Thursday July 22, 2021 @03:54PM
(#27923475)
Ah, paranoia is a good motivator to learn more. You might want to see this[1], for example. I think his solution is likely to be a trap, ie. not actually safe, but the presentation is at least a good example of how complicated it is to get security right.
[1] Open Source is Insufficient to Solve Trust Problems in Hardware [video] https://media.ccc.de/v/36c3-10690-open_source_is_insufficien...