News for hackers. Stuff that matters.
Re:The GPU, not the TPM, is the root of hardware DRM by fc417fc802 on Thursday January 02, 2025 @05:46PM (#42579842)
The ideal amount of attestation on a general purpose computer which is owned by me is zero. Any nonzero amount implies that control of the device has not actually been turned over to me. It implies not only the slippery slope to which you refer but also things about back doors and opportunity for dystopian political regimes and much more.

When it comes to financial or legal matters (and this includes online banking) a small dedicated hardware element for signing fingerprints is all that's ever been required. Anything more is an overreach.

Re:The GPU, not the TPM, is the root of hardware DRM by lxgr on Thursday January 02, 2025 @05:51PM (#42579885)
> back doors and opportunity for dystopian political regimes

No, this is a misunderstanding of what a TPM is.

A TPM is a secure element inside your computer, similar to the chip running your credit and debit card. That's it. Without you using it (i.e. your OS or an application you installed asking it to do something), it's exactly as dangerous as a blank chip card in your house that you don't use and didn't open any account for.

If you don't want anybody to talk to it, don't install applications or OSes on your computer that do things you don't want. You have full control over that! Not running software that's not acting in your own best interests is generally good practice anyway, TPM or no TPM.

> [...] a small dedicated hardware element for signing fingerprints is all that's ever been required [...]

You might be happy to hear that that's exactly what a TPM is, then!

Re:The GPU, not the TPM, is the root of hardware DRM by fc417fc802 on Thursday January 02, 2025 @05:57PM (#42579940)
I am fully aware of what a TPM is. I was speaking about trusted computing - ie the "general purpose attestation capability" that you referred to above.

As you say, a TPM alone can't do much of anything and doesn't pose much of a threat. Of course expanding the acronym - Trusted Platform Module - is a bit of a giveaway. They were always fully intended to serve as the root of trust for much more nefarious things.

Re:The GPU, not the TPM, is the root of hardware DRM by lxgr on Thursday January 02, 2025 @06:04PM (#42580001)
People keep saying that, yet the only thing I’ve ever seen TPMs used for is full disk encryption and user authentication.

Conversely, DRM is alive and well on almost universally TPM-less devices.

By the way, all of your comments in this thread end up dead – I had to vouch for them to be able to answer. Not sure what’s up with that.

Re:The GPU, not the TPM, is the root of hardware DRM by mjg59 on Thursday January 02, 2025 @06:00PM (#42579971)
You think there's no value in your laptop being able to attest its state to your phone in order to give you confidence it hasn't been tampered with? That's something that would be entirely under your control.
Re:The GPU, not the TPM, is the root of hardware DRM by ethbr1 on Friday January 03, 2025 @01:37AM (#42583145)
There's value in that, but it's a lesser value than the risk of normalizing manufacturer locking of computing devices.

Because the immediate next step after locking devices down is profit extraction from users.

Do you think Apple would have been able to maintain their App Store margins absent device control?

Re:The GPU, not the TPM, is the root of hardware DRM by mjg59 on Friday January 03, 2025 @02:17AM (#42583344)
So don't normalise manufacturer locking. We're not going to prevent the bad thing from happening by arguing against the hardware that enables the bad thing - we're going to need to argue against the bad thing.
Re:The GPU, not the TPM, is the root of hardware DRM by ethbr1 on Friday January 03, 2025 @08:38AM (#42585536)
I would if I trusted them, but IMHO ever device manufacturer is looking at their slim hardware margins and wishing they were fat software margins.

There's simply too much incentive for abuse.

The only way I personally could see supporting them is if there were first a legislative requirement that trusted modules always be user-modifiable.