Re:Box64 and RISC-V
by numpad0 on Wednesday May 31, 2023 @10:52AM
(#36139061)
Open source emulators implementing ME or TPM or whatever is not a problem, so long the user retains full control of private keys. Or if it’ll be even less of a problem if ME CPU is going to be emulated too, because then the community will get to record the evil overlord doing its thing.
[ Parent
| on HN ]
> not a problem, so long the user retains full control of private keys
The whole point of these technologies is to transfer control of the user's computer to various other actors. So in practice this condition (the user retaining control) is not going to be true, so they remain problematic.
While this use might be common, it's far from "the whole point".
To avoid evil maid attacks, there isn't much of an alternative.
Re:Box64 and RISC-V
by josephcsible on Wednesday May 31, 2023 @12:18PM
(#36140104)
I said EME (Encrypted Media Extensions), not ME (Management Engine).
No. I like TPMs. I hate DRMs.
TPMs help me have a secure (as in preventing evil maid AND being forensics proof) computer to use. The current TPM2.0 specification had some problems (external TPMs are easy to MITM), so I can't trust it to hold my disk encryption keys. But it still HELPS A LOT in mitigating my risk of typing in my FDE keys into a phishing prompt.
DRMs contribute to worse and worse media playing experience.
Is it this hard to tell apart?
Re:Box64 and RISC-V
by josephcsible on Saturday June 10, 2023 @07:22PM
(#36276346)
TPMs would be a good thing if they didn't allow remote attestation. That would give you all of the legitimate security benefits you want, while making them useless for evil purposes.