4 ms·

What I don't understand is Intel's rationale for developing this feature in the first place, especially back in the dark ages when the current ideas about trust

by kw71 11y ago

What I don't understand is Intel's rationale for developing this feature in the first place, especially back in the dark ages when the current ideas about trusted software had not been developed (for instance, in the Windows environment, replacing a dll with one that passes-through all calls except the interesting one, which would simply return arbitrary data) I always turned off this feature in the BIOS-setup of machines that gave the option.

userbinator 11y ago
especially back in the dark ages when the current ideas about trusted software had not been developed The ideas of this "war on general-purpose computing" have been around for a long time: https://en.wikipedia.org/wiki/Next-Generation_Secure_Computing_Base#History https://en.wikipedia.org/wiki/Next-Generation_Secure_Computi... Stallman's well known, eerily prescient story also dates from that era: http://www.gnu.org/philosophy/right-to-read.en.html http://www.gnu.org/philosophy/right-to-read.en.html The industry realised that pushing out the whole platform at once would cause intense opposition, and figured out that if they did it incrementally and convinced the users that it's "for your security", they could "boil the frog" while almost everyone remains blissfully ignorant. First code signing, then enforced code signing, secure boot and TPMs, now SGX, ... In fact, mobile devices today are already more locked-down than PCs, and both their SoCs and recent Intel CPUs (due to remote management/antitheft) contain unique identifiers which are even harder to disable than the PIII's serial number, yet the majority of users are not aware; furthermore, because they are "security features", anyone thinking of disabling them gets accused of being a terrorist/hacker/thief/pirate/etc. Meanwhile, the media producing a near-constant stream of news about hacks, leaks, and security bugs has made the population easier to convince in giving up freedom for security... it's immensely scary, and I'm not referring to the security issues; it's the long-term effects of the effort to eliminate them.
- A_COMPUTER 11y ago
  I want code signing, TPM, and secure boot. I just want it to be exclusively under my control. CPUID, this could be useful for business asset management.
  - Spooky23 11y ago
    Asset management was one of the use cases presented by Intel. But, unless you are Intel, you don't manage processors as assets. You manage computer chassis or blades. Processors are just one more component. The real reason it was there was all about DRM. The idea was that software or media would be restricted to a particular device.
- mortenlarsen 11y ago
  Reference: Cory Doctorow: The coming war on general computation [28C3] https://www.youtube.com/watch?v=yYqkU1y0AYc https://www.youtube.com/watch?v=yYqkU1y0AYc

by kw71 11y ago

userbinator 11y ago

especially back in the dark ages when the current ideas about trusted software had not been developed The ideas of this "war on general-purpose computing" have been around for a long time: https://en.wikipedia.org/wiki/Next-Generation_Secure_Computing_Base#History https://en.wikipedia.org/wiki/Next-Generation_Secure_Computi... Stallman's well known, eerily prescient story also dates from that era: http://www.gnu.org/philosophy/right-to-read.en.html http://www.gnu.org/philosophy/right-to-read.en.html The industry realised that pushing out the whole platform at once would cause intense opposition, and figured out that if they did it incrementally and convinced the users that it's "for your security", they could "boil the frog" while almost everyone remains blissfully ignorant. First code signing, then enforced code signing, secure boot and TPMs, now SGX, ... In fact, mobile devices today are already more locked-down than PCs, and both their SoCs and recent Intel CPUs (due to remote management/antitheft) contain unique identifiers which are even harder to disable than the PIII's serial number, yet the majority of users are not aware; furthermore, because they are "security features", anyone thinking of disabling them gets accused of being a terrorist/hacker/thief/pirate/etc. Meanwhile, the media producing a near-constant stream of news about hacks, leaks, and security bugs has made the population easier to convince in giving up freedom for security... it's immensely scary, and I'm not referring to the security issues; it's the long-term effects of the effort to eliminate them.

A_COMPUTER 11y ago
I want code signing, TPM, and secure boot. I just want it to be exclusively under my control. CPUID, this could be useful for business asset management.
- Spooky23 11y ago
  Asset management was one of the use cases presented by Intel. But, unless you are Intel, you don't manage processors as assets. You manage computer chassis or blades. Processors are just one more component. The real reason it was there was all about DRM. The idea was that software or media would be restricted to a particular device.
mortenlarsen 11y ago
Reference: Cory Doctorow: The coming war on general computation [28C3] https://www.youtube.com/watch?v=yYqkU1y0AYc https://www.youtube.com/watch?v=yYqkU1y0AYc