4 ms·
This comment mentions some non-dystopian uses of remote attestation: https://lwn.net/Articles/914323/ https://lwn.net/Articles/914323/ The one about leaving y
by pabs3 4y ago
This comment mentions some non-dystopian uses of remote attestation:
https://lwn.net/Articles/914323/ https://lwn.net/Articles/914323/
The one about leaving your laptop in the hotel and then the laptop being able to prove to your phone that the laptop hasn't been tampered with, is pretty compelling.
- mindslight 4y agoOf course one can envision many handy uses for remote attestation that would benefit individual users! Web 2.0 also had many technical advantages over local software - there are certainly reasons why it got adopted. But focusing on positive uses is naive and fallacious - the criticism is based on the downside of the inevitable negative uses when the device keys are recorded by manufacturers to create a root of trust that arbitrary third parties can abuse. The problem is that the technical capability also puts those end users at the mercy of large commercial actors specifying that the user's computer is "secure" from their centralized-corporate perspectives. Over time, that will inevitably ratchet into ever-more locked down computing forced onto end users. You can already see this dynamic with "SafetyNet" on Android, which destroys users' ability to exercise the purported Freedom of Android regardless of the source code being available.