3 ms·
By your logic, wouldn't EME be a good thing too, since its spec is also fully open?
by josephcsible 3y ago
By your logic, wouldn't EME be a good thing too, since its spec is also fully open?
- numpad0 3y agoOpen source emulators implementing ME or TPM or whatever is not a problem, so long the user retains full control of private keys. Or if it’ll be even less of a problem if ME CPU is going to be emulated too, because then the community will get to record the evil overlord doing its thing.
- ptx 3y ago> not a problem, so long the user retains full control of private keys The whole point of these technologies is to transfer control of the user's computer to various other actors. So in practice this condition (the user retaining control) is not going to be true, so they remain problematic.
- snvzz 3y agoWhile this use might be common, it's far from "the whole point". To avoid evil maid attacks, there isn't much of an alternative.
- josephcsible 3y agoI said EME (Encrypted Media Extensions), not ME (Management Engine).
- rfoo 3y agoNo. I like TPMs. I hate DRMs. TPMs help me have a secure (as in preventing evil maid AND being forensics proof) computer to use. The current TPM2.0 specification had some problems (external TPMs are easy to MITM), so I can't trust it to hold my disk encryption keys. But it still HELPS A LOT in mitigating my risk of typing in my FDE keys into a phishing prompt. DRMs contribute to worse and worse media playing experience. Is it this hard to tell apart?
- josephcsible 3y agoTPMs would be a good thing if they didn't allow remote attestation. That would give you all of the legitimate security benefits you want, while making them useless for evil purposes.