8 ms·

I did not view the video, but I believe "General Purpose Computing" is coming to an end. With everyone moving to Cell Phones plus the boot lockdown (Secure Boo

by jmclnx 4y ago

I did not view the video, but I believe "General Purpose Computing" is coming to an end. With everyone moving to Cell Phones plus the boot lockdown (Secure Boot) and things like Intel ME, TPM, future is not looking too bright. And I heard Microsoft is requiring some new addition to Chips that Windows will need which seems to be a kind of backdoor (I forgot what it is called). I am sure many people here have seen this, looks to me this is the direction society is slowly heading towards: www.gnu.org/philosophy/right-to-read.en.html

als0 4y ago
> And I heard Microsoft is requiring some new addition to Chips that Windows will need which seems to be a kind of backdoor (I forgot what it is called). It's called Pluton, and (scarily) there is not much public technical information about it.
- cokeandpepsi 4y ago
  Intel should be figuring how to fix sleep on their chipset, the company is managed by idiots and we just injected them with billions of tax payer dollars so they can continue this b.s.
- taftster 4y ago
  Just some links for the lazy: https://learn.microsoft.com/en-us/windows/security/information-protection/pluton/microsoft-pluton-security-processor https://learn.microsoft.com/en-us/windows/security/informati... https://www.howtogeek.com/779095/what-is-microsofts-pluton-security-processor/ https://www.howtogeek.com/779095/what-is-microsofts-pluton-s...
  - wizzwizz4 4y ago
    Note that none of this is technical information; it's just broad descriptions of the sort that you could've written in 2005. It's not clear in your links, but I think Pluton updates work like microcode updates. There's a nice quotation from the end of the How-To Geek article: > As long as these measures don’t prevent us from running software we actually want to use, Pluton is a welcome development.
    - taftster 4y ago
      Yeah, I wasn't trying to editorialize on this. I honestly didn't know about Pluton, so I just included a couple of links to newcomers like myself. Indeed, Pluton could be beneficial, assuming you are on the side of fully trusting the Microsoft ecosystem front-to-back. Or scary if you don't trust the old 'Softy. That being said, Apple's M1 architecture has a similar security chip installed as well. Some people legitimately want these walled gardens. We here at HN are probably more on the fringe side than the majority.
      - wizzwizz4 4y ago
        Very few people outside Microsoft want these walled gardens. They want the guarantees that the walled gardens can give them.
        javajosh 4y ago
        It's an eternal trade-off explored in much fiction. The Browncoats v Alliance in Firefly or the Rebel Alliance v the Empire in Star Wars, or the Vickies v anarchists in The Diamond Age, and many more. We want both the stability and humanity and safety of a cultured, controlled civilization, and the creative, exuberant culture that can be born out of periods of chaos. On a personal level, this implies we all want to live on the right side of the tracks, but have the option to party on the wrong side of the tracks. I think the rebels have to do better, to wit, they (we?) have to work smarter to make software that's just as functional but with far less code, so that it can be audited by an actual human being. Software engineers take a blase attitude about dependency bloat, but that must change. We also need to be ready to run on open hardware when it is released. Last but not least, we need to invent a way for the best hackers and geeks to sift through the software we run, people we trust to find flaws and exploits and not use them. I, for one, would gladly pay for this service, and I think thousands of others would, too.
- moffkalast 4y ago
  That doesn't sound too good. Last time some project was called Pluto it was a continuously radiation spewing nuclear ramjet.
- somrand0 4y ago
  I heard this before, with another name... around the 00s so "back in the day" some 20 years ago I think that ended up as some sort of trusted computing project; we were worried back then that linux was gonna be impossible to run in our PCs... well then PCs turned into smart-phones and even though they run linux (or iOS), we ain't choosing what they run the name was something with a P? like palladium or something that has no P but sounds somewhat like that?... I'm saying I don't remember.
  - saratogacx 4y ago
    You are correct in the name, Palladium. https://en.wikipedia.org/wiki/Next-Generation_Secure_Computing_Base https://en.wikipedia.org/wiki/Next-Generation_Secure_Computi...
- userbinator 4y ago
  and (scarily) there is not much public technical information about it What little there is, and even articles that are occasionally posted here about the dystopia it'll bring, seem to have vanished and/or be taken over by corporate mouthpieces spreading FUD in the comments. I can only see that as being the industry trying very, very hard to stop any dissent.
Eleison23 4y ago
A QA friend of mine remarked that he was amazed that the loss of general purpose computing capability would be accomplished simply by a change in form factor. Smartphone OSes have propogated their own curated walled-garden app stores, and then the desktop OS vendors follow suit. Soon it will simply not be possible to install unsigned, uncertified software on your computer, and that will be the end of GPC.
- robinsonb5 4y ago
  Which is why I desperately want someone to build a board using a Yosys/nextpnr-supported FPGA and having loads of RAM. Half a gig is a typical maximum for such boards - with access to more generous amount of RAM building an entirely self-hosting RISC-V based computer becomes plausible. OK it won't be fast, but it will be Free. (Of course that might not help much if the wider internet - or particular critical services - starts to require remote attestation...)
  - Jenda_ 4y ago
    I think such solution is not needed now -- even if all the vendors started selling only locked-down computers tomorrow (realistically I think the fastest transition may take 10 years, you not only need to implement this at motherboard/CPU vendors, but also within all these corporations that have their own servers and thus depend on running custom OSes), you still have loads of current hardware that you can use until it breaks, let's say another 10 years. Should the problem arise in 2035, you will have completely different FPGA/ASIC possibilities available by then, and current FPGAs are no longer manufactured.
    - robinsonb5 4y ago
      I hope it's never needed - but I'm also alarmed by how quickly certain transitions are happening (perhaps I'm just feeling especially pessimistic about the rate at which we're sleepwalking into a tech dystopia because a fortnight after the local supermarket installed a bunch of self-checkout terminals, HSBC announced the closure of over 100 UK branches, including the one I use!) We already have Pluton-equipped laptops with the 3rd-party signing key disabled by default - it's not a huge step further to remove it entirely. So yeah, I hope it's never needed, but "hope for the best, prepare for the worst", and all that!
MarkPNeyer 4y ago
Lots of people i think would happily accept a global authoritarian regime as long as it told the right stories about how it was Making The World Better For Everyone <3
- bee_rider 4y ago
  And another population that would accept such a regime as long as it was making the world a worse place for the sort of people they don’t like.
  - qu4z-2 4y ago
    I'm not convinced these are distinct populations.
phkahler 4y ago
General purpose computing was never really what the general public wanted. We might go back to general purpose computing for hobbyists.
- rfoo 4y ago
  It is in our best interest to make the general public want general purpose computing (and make general purpose computing useful for them).
  - antisthenes 4y ago
    You're going to fight an uphill battle on that one. In my experience the general public's notion of "general purpose computing" is "Well, my phone can do everything I need, isn't that general purpose computing?"
    - feanaro 4y ago
      "Sick of being forced to watch pesky ads instead of the video you actually want to see? General purpose computing is the reason you can."
    - TeMPOraL 4y ago
      > "Well, my phone can do everything I need (...)" Is something that's being said only in advertisements, or by people conditioned by modern mass market tech to feel helpless, and define their needs as subset of what they know how to do on their device. In my meatspace circles, the people who say "oh my phone does everything that I need" tend to regularly ask me to help them with stuff they need, but their phone (or their knowledge of it) is, in fact, insufficient for.
- raxxorraxor 4y ago
  I think it is the contrary. All our industry relies on general purpose computing. I don't believe the walled gardens will ever grow beyond the most trivial usages of these devices. I believe that a lot of people won't interact with computing aside from their smartphones.
drivers99 4y ago
We can still build our own computers and software from scratch if necessary.
- Jenda_ 4y ago
  The problem is that you will need software/services that only run on the "trusted" platform. An early example of this are services that require "apps" that require Google Services on Android, detect rooting or even require remote attestation.
  - drivers99 4y ago
    In that case we would need to use services (assuming they are actually needed) that respect freedom, or create them or find alternative ways to meet the same need.
    - runjake 4y ago
      Therein lies the whole point.
    - Jenda_ 4y ago
      It may be difficult, for example it may require starting a new bank, or outright impossible, when most people you need to communicate with (e.g. for business, or hobbies - but of course you can go living in the woods) are on some proprietary communication platform (think of WhatsApp/Facebook). Other times it may be "just" wildly inconvenient, e.g. when all taxi services, bikesharing and public transport in a given city will be available only through an "app". As another anecdote from real life, the 2022 AMS meeting (https://annual.ametsoc.org/index.cfm/2022/about-the-meeting/ams-102nd-annual-meeting-commitment-to-care-statement/ https://annual.ametsoc.org/index.cfm/2022/about-the-meeting/...) required "daily health survey" through a "CLEAR app" to attend.
    - TeMPOraL 4y ago
      > In that case we would need to use services (assuming they are actually needed) We're talking about things like banking. Yes, some of this already affects services that are needed in practical sense to function in modern society, and it'll affect more of them over time. > or create them [services that respect freedom] Impossible, because the market is highly competitive, so services respecting freedom have no chance to survive for long, which also means almost no one is willing to try making them - and more importantly - funding them. > or find alternative ways to meet the same need. Increasingly close to impossible in a practical sense. Observe how many things are increasingly becoming mobile-first or mobile-only. Banks, again, are a litmus test: there are plenty of new ones that don't have a web interface or physical presence, and the more traditional ones all strongly push users towards being dependent on the phone app (even if used only as an auth tool, it's still a hard dependency), which of course will happily use hardware and remote attestation to ensure you're not using a device that isn't a pristine, unmodded version of what the corporate world wants you to use.
_cenw 4y ago
[flagged]
- TreeRingCounter 4y ago
  > nobody really seems to care about locking you out of your own (non-mobile) device The "non-mobile" caveat is doing a lot of work in 2022. >90% of computer time is on mobile devices. > I ask that you care about republicans banning actual physical books from schools as least as much This seems like a total non-sequitur. Why do you bring this up? In any case, the last 3-4 times I looked into one of these cases, the "ban" was actually just removing the book from the mandatory curriculum. There are also some at-least-as-severe "bans" from the left, like removing Huckleberry Finn due to racial designators that are considered offensive. The pressure to ban these books does not come from republicans.
  - _cenw 4y ago
    this comment was about Pluton. Mobile is an entirely different beast. But that aside, the extent of the "lockdown" outside of recent Huawei shenanigans always seems to be limited to which corporations can put their services on a device under which rules. Not which books you can read.
    - Jenda_ 4y ago
      > Mobile is an entirely different beast. Why would desktop vendors not follow the same pathway? To me, it looks like it is only a "tradition" (desktop computers are from an era when it was deemed normal to tinker with your OS) and the paradigm can shift.
      - _cenw 4y ago
        Because it is extremely disruptive to the entire platform? Windows has been keeping decades old APIs on life support for the sake of business customers. This would quite literally be the opposite move. These two ecosystems have not converged in the past 20+ years, why would they now? Also, somehow most Android vendors still provide bootloader unlock keys.
Jenda_ 4y ago
> looks to me this is the direction society is slowly heading towards It's not, notice how easily it was circumvented in the story. In reality, it would not be possible to lend Lissa the computer with books, because there would be continuous FaceID checking who is the real person staring at the screen. Also, in the story, "ten percent of those fees went to the researchers who wrote the papers", that would be a great upgrade for the current world.
A4ET8a8uTh0 4y ago
I oddly disagree. I mean the trend is definitely there, but last time I checked unRaid can deal with TPM ( so clearly there is an interest from motivated individuals to defeat that trend ), cell phones are actually even more interesting as they were kinda locked in to begin with and we are slowly seeing competition from non-duopology sources ( purism, pine ) and degoogled OSs.. The war is there, but it seems not all is lost just yet.
conradev 4y ago
I think it’s important to understand why these trends are happening if you want any hope of reversing them. It’s not just some incipient evil spreading its shadow over computing that we need to address. These technologies represent an advancement in the field, but the control of them is out of our hands. The components you are referring to confer a clear and important benefit to devices – a secure boot chain. This is the most foolproof way we know to prevent tampering or hacking a device. The problem is that some of these secure boot chains don’t allow being overridden by users. Many do – the Pixel series of phones, the M-series of Apple laptops, and Windows S devices all allow “turning off” or “hijacking” their secure boot chains. The further problem if you can turn off secure boot is that these pieces of hardware often can’t then be turned back on with a different secure boot chain – say, one based on open source software. Debian and NixOS and other OSes already have zero-trust ways of verifying the integrity of their software using reproducible builds, but they can’t go the step further and have the hardware it is installed on do the same verification with some sort of signature. GrapheneOS has figured out how to do this, and it leverages the secure boot chain of the Pixel device. It is very cool and I think a nice symbiosis between the hardware and open source software: https://grapheneos.org/build#generating-release-signing-keys https://grapheneos.org/build#generating-release-signing-keys The next and more problematic part of what these technologies provide is integrity, which is the guarantee that on top of the boot being secure, the software being run is from the manufacturer and it behaves as the manufacturer intends. A lot of functionality currently relies on this guarantee of integrity: anti-cheat software, DRM software (Widevine, HDCP), transit cards, credit cards, driver’s licenses, etc. The technology manufacturers aren’t building this software because they want to, but because they have to. The Original Sin for the iPhone was carriers: at the time in 2008 they were really worried about unlocking and tethering, and the prank of the day was to put a flashlight app into the App Store that allowed tethering via a proxy. Rights holders, carriers, game manufacturers, etc all pressure tech companies to use integrity to solve their problems. Many of these solutions have alternatives that don’t require OS integrity: if the government issues signed digital IDs, for example, then it wouldn’t matter what software is running on the phone. Some are tough and don’t have alternatives, like anti-cheat and DRM. DRM in particular is a complex US legal issue: anti-circumvention is straight up breaking the law. No solution would be comprehensive without changing the law. Progress has been made, though! The fact that we have figured out ways of unlocking boot chains in a way that is acceptable to all of the large companies is awesome. Apple does it by being able to guarantee other secure boot chains on the device remain intact, and Google does it by ensuring the device is wiped. This took real engineering effort to do. It’s important to push these companies to go further. An M1 iPad is almost identical to an M1 MacBook in hardware, and yet Apple only allows the latter to run Linux. The comment is already a blog post, but another big problem is that these tools are great for anti-competitive purposes… which the government is increasingly taking a look at.
ip26 4y ago
Why do you care if other people are using cell phones? You can still build your own general purpose computer, and even if Wintel no longer suits your needs, there are many other options.
teddyh 4y ago
More details can be had in The Digital Imprimatur (from 2003): https://www.fourmilab.ch/documents/digital-imprimatur/ https://www.fourmilab.ch/documents/digital-imprimatur/
raxxorraxor 4y ago
TPM and secure boot will certainly create a caste system of devices. You will only be able to run your banking app on approved devices, just like we can see on smartphone. There are defensible arguments for secure boot, but they all thoroughly miss the larger picture in my opinion. That said, I do believe that Windows will loose some endusers finally. Not the masses perhaps, but as long as there is an alternative, I am happy. If some apps forces me to use a specific machine or OS, I will not use it.

by jmclnx 4y ago

als0 4y ago

> And I heard Microsoft is requiring some new addition to Chips that Windows will need which seems to be a kind of backdoor (I forgot what it is called). It's called Pluton, and (scarily) there is not much public technical information about it.

cokeandpepsi 4y ago
Intel should be figuring how to fix sleep on their chipset, the company is managed by idiots and we just injected them with billions of tax payer dollars so they can continue this b.s.
taftster 4y ago
Just some links for the lazy: https://learn.microsoft.com/en-us/windows/security/information-protection/pluton/microsoft-pluton-security-processor https://learn.microsoft.com/en-us/windows/security/informati... https://www.howtogeek.com/779095/what-is-microsofts-pluton-security-processor/ https://www.howtogeek.com/779095/what-is-microsofts-pluton-s...
- wizzwizz4 4y ago
  Note that none of this is technical information; it's just broad descriptions of the sort that you could've written in 2005. It's not clear in your links, but I think Pluton updates work like microcode updates. There's a nice quotation from the end of the How-To Geek article: > As long as these measures don’t prevent us from running software we actually want to use, Pluton is a welcome development.
  - taftster 4y ago
    Yeah, I wasn't trying to editorialize on this. I honestly didn't know about Pluton, so I just included a couple of links to newcomers like myself. Indeed, Pluton could be beneficial, assuming you are on the side of fully trusting the Microsoft ecosystem front-to-back. Or scary if you don't trust the old 'Softy. That being said, Apple's M1 architecture has a similar security chip installed as well. Some people legitimately want these walled gardens. We here at HN are probably more on the fringe side than the majority.
    - wizzwizz4 4y ago
      Very few people outside Microsoft want these walled gardens. They want the guarantees that the walled gardens can give them.
      - javajosh 4y ago
        It's an eternal trade-off explored in much fiction. The Browncoats v Alliance in Firefly or the Rebel Alliance v the Empire in Star Wars, or the Vickies v anarchists in The Diamond Age, and many more. We want both the stability and humanity and safety of a cultured, controlled civilization, and the creative, exuberant culture that can be born out of periods of chaos. On a personal level, this implies we all want to live on the right side of the tracks, but have the option to party on the wrong side of the tracks. I think the rebels have to do better, to wit, they (we?) have to work smarter to make software that's just as functional but with far less code, so that it can be audited by an actual human being. Software engineers take a blase attitude about dependency bloat, but that must change. We also need to be ready to run on open hardware when it is released. Last but not least, we need to invent a way for the best hackers and geeks to sift through the software we run, people we trust to find flaws and exploits and not use them. I, for one, would gladly pay for this service, and I think thousands of others would, too.
moffkalast 4y ago
That doesn't sound too good. Last time some project was called Pluto it was a continuously radiation spewing nuclear ramjet.
somrand0 4y ago
I heard this before, with another name... around the 00s so "back in the day" some 20 years ago I think that ended up as some sort of trusted computing project; we were worried back then that linux was gonna be impossible to run in our PCs... well then PCs turned into smart-phones and even though they run linux (or iOS), we ain't choosing what they run the name was something with a P? like palladium or something that has no P but sounds somewhat like that?... I'm saying I don't remember.
- saratogacx 4y ago
  You are correct in the name, Palladium. https://en.wikipedia.org/wiki/Next-Generation_Secure_Computing_Base https://en.wikipedia.org/wiki/Next-Generation_Secure_Computi...
userbinator 4y ago
and (scarily) there is not much public technical information about it What little there is, and even articles that are occasionally posted here about the dystopia it'll bring, seem to have vanished and/or be taken over by corporate mouthpieces spreading FUD in the comments. I can only see that as being the industry trying very, very hard to stop any dissent.

Eleison23 4y ago

A QA friend of mine remarked that he was amazed that the loss of general purpose computing capability would be accomplished simply by a change in form factor. Smartphone OSes have propogated their own curated walled-garden app stores, and then the desktop OS vendors follow suit. Soon it will simply not be possible to install unsigned, uncertified software on your computer, and that will be the end of GPC.

robinsonb5 4y ago
Which is why I desperately want someone to build a board using a Yosys/nextpnr-supported FPGA and having loads of RAM. Half a gig is a typical maximum for such boards - with access to more generous amount of RAM building an entirely self-hosting RISC-V based computer becomes plausible. OK it won't be fast, but it will be Free. (Of course that might not help much if the wider internet - or particular critical services - starts to require remote attestation...)
- Jenda_ 4y ago
  I think such solution is not needed now -- even if all the vendors started selling only locked-down computers tomorrow (realistically I think the fastest transition may take 10 years, you not only need to implement this at motherboard/CPU vendors, but also within all these corporations that have their own servers and thus depend on running custom OSes), you still have loads of current hardware that you can use until it breaks, let's say another 10 years. Should the problem arise in 2035, you will have completely different FPGA/ASIC possibilities available by then, and current FPGAs are no longer manufactured.
  - robinsonb5 4y ago
    I hope it's never needed - but I'm also alarmed by how quickly certain transitions are happening (perhaps I'm just feeling especially pessimistic about the rate at which we're sleepwalking into a tech dystopia because a fortnight after the local supermarket installed a bunch of self-checkout terminals, HSBC announced the closure of over 100 UK branches, including the one I use!) We already have Pluton-equipped laptops with the 3rd-party signing key disabled by default - it's not a huge step further to remove it entirely. So yeah, I hope it's never needed, but "hope for the best, prepare for the worst", and all that!

MarkPNeyer 4y ago

Lots of people i think would happily accept a global authoritarian regime as long as it told the right stories about how it was Making The World Better For Everyone <3

bee_rider 4y ago
And another population that would accept such a regime as long as it was making the world a worse place for the sort of people they don’t like.
- qu4z-2 4y ago
  I'm not convinced these are distinct populations.

phkahler 4y ago

General purpose computing was never really what the general public wanted. We might go back to general purpose computing for hobbyists.

rfoo 4y ago
It is in our best interest to make the general public want general purpose computing (and make general purpose computing useful for them).
- antisthenes 4y ago
  You're going to fight an uphill battle on that one. In my experience the general public's notion of "general purpose computing" is "Well, my phone can do everything I need, isn't that general purpose computing?"
  - feanaro 4y ago
    "Sick of being forced to watch pesky ads instead of the video you actually want to see? General purpose computing is the reason you can."
  - TeMPOraL 4y ago
    > "Well, my phone can do everything I need (...)" Is something that's being said only in advertisements, or by people conditioned by modern mass market tech to feel helpless, and define their needs as subset of what they know how to do on their device. In my meatspace circles, the people who say "oh my phone does everything that I need" tend to regularly ask me to help them with stuff they need, but their phone (or their knowledge of it) is, in fact, insufficient for.
raxxorraxor 4y ago
I think it is the contrary. All our industry relies on general purpose computing. I don't believe the walled gardens will ever grow beyond the most trivial usages of these devices. I believe that a lot of people won't interact with computing aside from their smartphones.

drivers99 4y ago

We can still build our own computers and software from scratch if necessary.

Jenda_ 4y ago
The problem is that you will need software/services that only run on the "trusted" platform. An early example of this are services that require "apps" that require Google Services on Android, detect rooting or even require remote attestation.
- drivers99 4y ago
  In that case we would need to use services (assuming they are actually needed) that respect freedom, or create them or find alternative ways to meet the same need.
  - runjake 4y ago
    Therein lies the whole point.
  - Jenda_ 4y ago
    It may be difficult, for example it may require starting a new bank, or outright impossible, when most people you need to communicate with (e.g. for business, or hobbies - but of course you can go living in the woods) are on some proprietary communication platform (think of WhatsApp/Facebook). Other times it may be "just" wildly inconvenient, e.g. when all taxi services, bikesharing and public transport in a given city will be available only through an "app". As another anecdote from real life, the 2022 AMS meeting (https://annual.ametsoc.org/index.cfm/2022/about-the-meeting/ams-102nd-annual-meeting-commitment-to-care-statement/ https://annual.ametsoc.org/index.cfm/2022/about-the-meeting/...) required "daily health survey" through a "CLEAR app" to attend.
  - TeMPOraL 4y ago
    > In that case we would need to use services (assuming they are actually needed) We're talking about things like banking. Yes, some of this already affects services that are needed in practical sense to function in modern society, and it'll affect more of them over time. > or create them [services that respect freedom] Impossible, because the market is highly competitive, so services respecting freedom have no chance to survive for long, which also means almost no one is willing to try making them - and more importantly - funding them. > or find alternative ways to meet the same need. Increasingly close to impossible in a practical sense. Observe how many things are increasingly becoming mobile-first or mobile-only. Banks, again, are a litmus test: there are plenty of new ones that don't have a web interface or physical presence, and the more traditional ones all strongly push users towards being dependent on the phone app (even if used only as an auth tool, it's still a hard dependency), which of course will happily use hardware and remote attestation to ensure you're not using a device that isn't a pristine, unmodded version of what the corporate world wants you to use.

_cenw 4y ago

[flagged]

TreeRingCounter 4y ago
> nobody really seems to care about locking you out of your own (non-mobile) device The "non-mobile" caveat is doing a lot of work in 2022. >90% of computer time is on mobile devices. > I ask that you care about republicans banning actual physical books from schools as least as much This seems like a total non-sequitur. Why do you bring this up? In any case, the last 3-4 times I looked into one of these cases, the "ban" was actually just removing the book from the mandatory curriculum. There are also some at-least-as-severe "bans" from the left, like removing Huckleberry Finn due to racial designators that are considered offensive. The pressure to ban these books does not come from republicans.
- _cenw 4y ago
  this comment was about Pluton. Mobile is an entirely different beast. But that aside, the extent of the "lockdown" outside of recent Huawei shenanigans always seems to be limited to which corporations can put their services on a device under which rules. Not which books you can read.
  - Jenda_ 4y ago
    > Mobile is an entirely different beast. Why would desktop vendors not follow the same pathway? To me, it looks like it is only a "tradition" (desktop computers are from an era when it was deemed normal to tinker with your OS) and the paradigm can shift.
    - _cenw 4y ago
      Because it is extremely disruptive to the entire platform? Windows has been keeping decades old APIs on life support for the sake of business customers. This would quite literally be the opposite move. These two ecosystems have not converged in the past 20+ years, why would they now? Also, somehow most Android vendors still provide bootloader unlock keys.

Jenda_ 4y ago

> looks to me this is the direction society is slowly heading towards It's not, notice how easily it was circumvented in the story. In reality, it would not be possible to lend Lissa the computer with books, because there would be continuous FaceID checking who is the real person staring at the screen. Also, in the story, "ten percent of those fees went to the researchers who wrote the papers", that would be a great upgrade for the current world.

A4ET8a8uTh0 4y ago

I oddly disagree. I mean the trend is definitely there, but last time I checked unRaid can deal with TPM ( so clearly there is an interest from motivated individuals to defeat that trend ), cell phones are actually even more interesting as they were kinda locked in to begin with and we are slowly seeing competition from non-duopology sources ( purism, pine ) and degoogled OSs.. The war is there, but it seems not all is lost just yet.

conradev 4y ago

I think it’s important to understand why these trends are happening if you want any hope of reversing them. It’s not just some incipient evil spreading its shadow over computing that we need to address. These technologies represent an advancement in the field, but the control of them is out of our hands. The components you are referring to confer a clear and important benefit to devices – a secure boot chain. This is the most foolproof way we know to prevent tampering or hacking a device. The problem is that some of these secure boot chains don’t allow being overridden by users. Many do – the Pixel series of phones, the M-series of Apple laptops, and Windows S devices all allow “turning off” or “hijacking” their secure boot chains. The further problem if you can turn off secure boot is that these pieces of hardware often can’t then be turned back on with a different secure boot chain – say, one based on open source software. Debian and NixOS and other OSes already have zero-trust ways of verifying the integrity of their software using reproducible builds, but they can’t go the step further and have the hardware it is installed on do the same verification with some sort of signature. GrapheneOS has figured out how to do this, and it leverages the secure boot chain of the Pixel device. It is very cool and I think a nice symbiosis between the hardware and open source software: https://grapheneos.org/build#generating-release-signing-keys https://grapheneos.org/build#generating-release-signing-keys The next and more problematic part of what these technologies provide is integrity, which is the guarantee that on top of the boot being secure, the software being run is from the manufacturer and it behaves as the manufacturer intends. A lot of functionality currently relies on this guarantee of integrity: anti-cheat software, DRM software (Widevine, HDCP), transit cards, credit cards, driver’s licenses, etc. The technology manufacturers aren’t building this software because they want to, but because they have to. The Original Sin for the iPhone was carriers: at the time in 2008 they were really worried about unlocking and tethering, and the prank of the day was to put a flashlight app into the App Store that allowed tethering via a proxy. Rights holders, carriers, game manufacturers, etc all pressure tech companies to use integrity to solve their problems. Many of these solutions have alternatives that don’t require OS integrity: if the government issues signed digital IDs, for example, then it wouldn’t matter what software is running on the phone. Some are tough and don’t have alternatives, like anti-cheat and DRM. DRM in particular is a complex US legal issue: anti-circumvention is straight up breaking the law. No solution would be comprehensive without changing the law. Progress has been made, though! The fact that we have figured out ways of unlocking boot chains in a way that is acceptable to all of the large companies is awesome. Apple does it by being able to guarantee other secure boot chains on the device remain intact, and Google does it by ensuring the device is wiped. This took real engineering effort to do. It’s important to push these companies to go further. An M1 iPad is almost identical to an M1 MacBook in hardware, and yet Apple only allows the latter to run Linux. The comment is already a blog post, but another big problem is that these tools are great for anti-competitive purposes… which the government is increasingly taking a look at.

ip26 4y ago

Why do you care if other people are using cell phones? You can still build your own general purpose computer, and even if Wintel no longer suits your needs, there are many other options.

teddyh 4y ago

More details can be had in The Digital Imprimatur (from 2003): https://www.fourmilab.ch/documents/digital-imprimatur/ https://www.fourmilab.ch/documents/digital-imprimatur/

raxxorraxor 4y ago

TPM and secure boot will certainly create a caste system of devices. You will only be able to run your banking app on approved devices, just like we can see on smartphone. There are defensible arguments for secure boot, but they all thoroughly miss the larger picture in my opinion. That said, I do believe that Windows will loose some endusers finally. Not the masses perhaps, but as long as there is an alternative, I am happy. If some apps forces me to use a specific machine or OS, I will not use it.