Re:Hacking BIOS chips isn't just the NSA's domain anymore
by kuschku on Saturday March 21, 2015 @08:51AM
(#9242613)
TPM /could/ be nice, if you personally would control it, instead of some company burning the signing keys into the processor – because then you would be able to make a safe system.
[ Parent
| on HN ]
Re:Hacking BIOS chips isn't just the NSA's domain anymore
by pgeorgi on Saturday March 21, 2015 @09:47AM
(#9242715)
Except for the Enrollment Key, that's how TPMs work.
And the EK is not so much an issue of "control", but of "privacy" - and as long as you control the OS, access to that key (or any other) can be mediated properly.