4 ms·
MWC 2022: The next Microsoft Pluton Device and PAC technology
- no_time 5y agoSounds great. Where can I, the owner of the device request the keys?
- Arnavion 5y agoAFAIK Windows only treats it like a TPM (*), so you could just talk to it using TSS to access whatever keys it has just like Windows itself would. "Access" != "export", of course, because it's an HSM. (*) A TPM that is special for being baked into the CPU, and for being a known quantity that can thus be updated via Windows Update and used for Secure Boot attestation, but a TPM all the same.
- tonyedgecombe 5y agoI think no_time knows that.
- 0xy 5y agoI have a visceral negative reaction to this security chip because of Microsoft's name behind it. Microsoft has shown they have contempt for users' privacy and security through Windows telemetry, Edge telemetry, BitLocker backdoor (MS strongly pushes users to backup keys to the cloud while calling it "encrypted", among security blunders). As recently as 2020, Bing suffered a huge data breach that linked users to terms that could be used to blackmail them (adult keywords). Then there's Microsoft's cozy relationship with the NSA, building decryption tools targeting their own users. [1] For these reasons alone, even if Pluton is virtual Fort Knox, it's DOA for me. [1] https://www.theguardian.com/world/2013/jul/11/microsoft-nsa-collaboration-user-data https://www.theguardian.com/world/2013/jul/11/microsoft-nsa-...
- pom66 5y agoGame was won long time ago, the public ate client-server executables as soon as modems were fast enough in 1997 with the likes of ultima online, MMO's/steam/drm is all the same thing, us losing control of our PC's becuase the average gamer and PC user is stupid even among professionals. The industry always wanted to kill infinitely copyable local application binaries and they found their way in via PC gaming in 97 with ultima online, lineage and everquest. That told the entire tech industry the average person would literally pay for a broken application and pay for the priveledge of robbing his or herself. The average member of the PC using public is oblivious. The time to get nervous was the advent of MMO's, which were just RPG's with stolen networking code, which gave valve the inspiration for steam, which was a direct attack on local executables. So valve, Ea, etc, have been hacking our PC's since the mid 90's and early 2000's. To complain about pluton now, means you're 20 years too late. Go have a read of this paper by university researchers, this has been the plan of the WIP (world intellectual property organization) since the mid 90's. The attack on and the ending of general computing was planned from the beginning. https://web2.qatar.cmu.edu/cs/15349/dl/DRM-TC.pdf https://web2.qatar.cmu.edu/cs/15349/dl/DRM-TC.pdf PC game companies accelerated it with gambling by rebranding their PC rpg's with stolen networking multiplayer mmo's to disposess the masses. Most hackernews commenters today are oblivious, I see positive comments about steam mmo's/f2p games when they are just regular pc games with missing files and game code. Our species is really dumb.
- pjmlp 5y agoGood to see even Windows adopting pointer authentication hardware, SPARC and ARM lead the way, with Intel having botched their MPX implementation.