News for hackers. Stuff that matters.

A comment on Fixing the TPM: Hardware Security Modules Done Right. Parent comment

Re:Fixing the TPM: Hardware Security Modules Done Right by mindslight on Saturday August 19, 2023 @12:43AM (#37185587)
But remote attestation doesn't completely prevent you from running custom ROMs. Rather the problem is if you want to use various proprietary crapps/websites that insist on performing attestation. So there doesn't seem to be a point into choosing a "dumb phone" besides as some sort of protest. Rather for each of your devices you'll choose having a libre user-representing (ie secure) OS, or a locked down web TV equivalent. I'd personally choose my pocket device to be running secure libre software, and then use any proprietary crapps on a tablet that stays at home. If remote attestation gets so bad that I can't even do things like access store apps on a libre/secure device, then I'll carry two, with the libre/secure device supplying wifi AP to the other.

(this comment is most certainly not meant as any sort of defense of remote attestation)

[ Parent | on HN ]
Re:Fixing the TPM: Hardware Security Modules Done Right by xg15 on Saturday August 19, 2023 @05:38AM (#37187065)
The problem is, that's where the network effect bites you in the butt. With functioning remote attestation, platforms can lock down their APIs, so there often will not be a libre alternative. I.e. if your friends are on signal or whatsapp or twitter or whatever, you'll have to use a second phone to contact them, which will probably soon become your primary phone.
[ Parent | on HN ]
Re:Fixing the TPM: Hardware Security Modules Done Right by mindslight on Saturday August 19, 2023 @10:54AM (#37189409)
Sure, if things get really bad and I couldn't convince friends to use libre apps and/or texting no longer works, then I'd have to choose my main pocket device to be locked down. I'd probably still try to carry the libre device as a secondary one to have access to trustable apps while out, but I can see that being too inconvenient and giving up on it.

But my point was that still doesn't indicate moving to a "dumb" phone. A dumb phone is just a locked down device with even fewer capabilities.

[ Parent | on HN ]