3 ms·
It doesn't prove that your device is secure at all. It just "secures" it from the user, not from malware. Even if it's signed and approved, malware can still hi
by Pannoniae 3y ago
It doesn't prove that your device is secure at all. It just "secures" it from the user, not from malware. Even if it's signed and approved, malware can still hijack it....
- charcircuit 3y agoOkay let me rephrase it. The point is to be able to prove what software is running for the purpose of being able to tell when software deemed as secure is running. >Even if it's signed and approved, malware can still hijack it.... At which point the vulnerability in the software or hardware should be fixed and the old version should be blacklisted.
- yjftsjthsd-h 3y agoSo every time anyone finds a new CVE in Windows, we're going to blacklist every single Windows machine until it's patched? I mean, that would be hilarious, but that's not how it will ever actually be implemented.
- charcircuit 3y ago>So every time anyone finds a new CVE in Windows, we're going to blacklist every single Windows machine until it's patched? Failing attestation does not mean you get blacklisted. It means that you are not as trustworthy. Not every CVE breaks an OS's security model.