4 ms·
Author here. > Errr... no. Using no TPM of any kind decreases your security. You're right, I wrote too fast, sorry about that. What I meant to say is that it
by gquere 3y ago
Author here.
> Errr... no. Using no TPM of any kind decreases your security.
You're right, I wrote too fast, sorry about that. What I meant to say is that it discrete TPM with no PIN is an inferior solution compared to PIN/passphrase or fTPM. Also I should have added that it gives the illusion of security which I hinted at in the foreword. I'm leaving it as is for now, the discussions here are interesting.
- gbil 3y agoSome months ago my company (in the 200k+ employees big) decided to remove pin requirement to “enhance UX while staying secure”. Many objections from quite a few people, mine included pointing to PoC key extractions from TPM etc. and… nothing . Seems that a multi billion company with no-ask money for cybersecurity misses the basics