3 ms·
You're correct, and the dangers of this redefinition of "security" were known even further back: "Unfortunately, the attestation model in TCG's current design
by dane-pgp 5y ago
You're correct, and the dangers of this redefinition of "security" were known even further back:
"Unfortunately, the attestation model in TCG's current design can equally effectively prevent the software on a computer from being changed deliberately by the computer owner with his or her full knowledge and consent. While the owner is always free to alter software, attestation adds a new risk: doing so may now eliminate the computer's ability to interoperate with other computers."
https://www.eff.org/files/20031001_tc.pdf https://www.eff.org/files/20031001_tc.pdf
- iggldiggl 5y agoWhich can already be seen in action on Android: Various apps refuse to work if you're rooted, and Google is now slowly moving over to hardware-based attestation that probably can no longer be easily fooled.