3 ms·
This feature isn't really for people like you and me. It's for big companies like Red Hat and Google to utilise on their servers. Google have their own TPMs the
by cedws 3y ago
This feature isn't really for people like you and me. It's for big companies like Red Hat and Google to utilise on their servers. Google have their own TPMs they can trust. Red Hat probably have the paperwork to say their TPMs are safe.
But worrying about your TPM being backdoored is pointless anyway. If they can backdoor your TPM, they can backdoor anything.
- immibis 3y ago> If they can backdoor your TPM, they can backdoor anything. [citation needed]
- cedws 3y agoThere are hundreds of components in a computer and the TPM would be one of the hardest to backdoor. Bear in mind where this stuff is manufactured. The manufacturer would want nothing to do with funny business like this because it could harm their sales, so it would have to be done under their nose, or they would have to be compelled by the government. US intelligence agencies don't generally go around mass backdooring things. It's too risky. They carefully target their attacks.
- immibis 3y agoIt's... extremely easy for the government to compel mass backdoors in TPMs. Don't you remember Clipper? And the backdoor would be completely invisible until they used it, since TPMs aren't auditable.
- kenjackson 3y agoBut it’s easy for governments to compel backdoors into any component. Even open source for non trivial code is easy to introduce obscure bugs that are exploitable.
- immibis 3y agoThe backdoor in most components is really complicated. Backdooring a TPM is relatively easy, and undetectable.
- sangnoir 3y ago> [citation needed] Picture-of-a-Cisco-router-getting-a-hardware-implant-installed-after-being-indicted-during-shipping.snowden-files.jpg
- networkchad 3y ago[dead]
- fsflover 3y agoYou can order anti-interdiction services from Purism to be sure your hardware isn't tampered with during shipping.