5 ms·

For what it's worth, these are all the same arguments people have made regarding the TPM chip over the last ~15 years: https://en.wikipedia.org/wiki/Trusted_Pl

For what it's worth, these are all the same arguments people have made regarding the TPM chip over the last ~15 years: https://en.wikipedia.org/wiki/Trusted_Platform_Module https://en.wikipedia.org/wiki/Trusted_Platform_Module It also reminds me a lot of the Palladium controversy of ages gone by: https://www.zdnet.com/article/microsofts-palladium-what-the-heck-is-it/ https://www.zdnet.com/article/microsofts-palladium-what-the-...

deleted 6y ago
[deleted]
tyingq 6y ago
Isn't the TPM a large part of why it's difficult to run anything other than iOS on an iPad/iPhone?
- DCKing 6y ago
  iPhones don't really contain any hardware that does not have more or less a conceptual equivalent in other smartphones. I suppose with "TPM" you mean the "Secure Element", which on iPhones and modern Android phones contains the disk encryption keys. Like a lot of other smartphones, the main difficulty in running something else on an iDevice is the locked bootloader. It won't run anything not signed by Apple. If an exploit like checkra1n is used to defeat this, iPhones can run Linux in principle [1], of course practically restricted by a lack of a large amount of drivers required to run Linux well. This iDevice OS lockdown completely reduces to 1) the locked bootloader which must be "defeated" - which M1 Macs contain a built in tool for - and 2) the only OS with drivers for the hardware being Apple's Darwin. So no, the TPM isn't a large part of why it's so difficult to run anything else on an iDevice. [1]: https://blog.project-insanity.org/2020/04/16/running-postmarketos-on-iphone-7/ https://blog.project-insanity.org/2020/04/16/running-postmar...
  - lxgr 6y ago
    You probably mean the Secure Enclave. The Secure Element contains payment applications and keys for Apple Pay.
- willyt 6y ago
  No it was an intel thing for secure booting windows in x86 PCs back in the days when Microsoft was top of the world and everyone thought Wintel were evil monopolists trying to lock Linux out of the PC ecosystem. I think there are still TPM like capabilities in intel chips now, but they rebranded it?
  - tyingq 6y ago
    I had assumed TPM was generic enough to refer to the T2 as well.
    - danudey 6y ago
      Delayed reply, but no, TPM is a specific international standard: https://en.wikipedia.org/wiki/Trusted_Platform_Module https://en.wikipedia.org/wiki/Trusted_Platform_Module iPhones, iPads, etc. do use a similar concept though.

deleted 6y ago

[deleted]

tyingq 6y ago

Isn't the TPM a large part of why it's difficult to run anything other than iOS on an iPad/iPhone?

DCKing 6y ago
iPhones don't really contain any hardware that does not have more or less a conceptual equivalent in other smartphones. I suppose with "TPM" you mean the "Secure Element", which on iPhones and modern Android phones contains the disk encryption keys. Like a lot of other smartphones, the main difficulty in running something else on an iDevice is the locked bootloader. It won't run anything not signed by Apple. If an exploit like checkra1n is used to defeat this, iPhones can run Linux in principle [1], of course practically restricted by a lack of a large amount of drivers required to run Linux well. This iDevice OS lockdown completely reduces to 1) the locked bootloader which must be "defeated" - which M1 Macs contain a built in tool for - and 2) the only OS with drivers for the hardware being Apple's Darwin. So no, the TPM isn't a large part of why it's so difficult to run anything else on an iDevice. [1]: https://blog.project-insanity.org/2020/04/16/running-postmarketos-on-iphone-7/ https://blog.project-insanity.org/2020/04/16/running-postmar...
- lxgr 6y ago
  You probably mean the Secure Enclave. The Secure Element contains payment applications and keys for Apple Pay.
willyt 6y ago
No it was an intel thing for secure booting windows in x86 PCs back in the days when Microsoft was top of the world and everyone thought Wintel were evil monopolists trying to lock Linux out of the PC ecosystem. I think there are still TPM like capabilities in intel chips now, but they rebranded it?
- tyingq 6y ago
  I had assumed TPM was generic enough to refer to the T2 as well.
  - danudey 6y ago
    Delayed reply, but no, TPM is a specific international standard: https://en.wikipedia.org/wiki/Trusted_Platform_Module https://en.wikipedia.org/wiki/Trusted_Platform_Module iPhones, iPads, etc. do use a similar concept though.