3 ms·
> TPM is the same It's not really: LUKS is an open standard and GRUB is a free software that implements it. With a TPM you're likely to get a chip that is 100%
by rnhmjoj 3y ago
> TPM is the same
It's not really: LUKS is an open standard and GRUB is a free software that
implements it. With a TPM you're likely to get a chip that is 100% a black box,
with the exception of a few people who signed NDAs and researches that have
knowledge and tools to poke into it.
> generally get patched as part of firmware updates released by your vendor
If it can even be fixed with a softwar update. Also, you're very lucky to get
maybe a couple of years of firmware updates, then your're on your own.
- Nextgrid 3y ago> with the exception of a few people who signed NDAs and researches that have knowledge and tools to poke into it. This is good enough for the 90% of people who currently operate without full-disk-encryption at all. It would be a huge improvement. Obviously, it's up to each individual user to evaluate their threat model and proceed accordingly. Nobody is forcing you to use a TPM, you can still use LUKS/etc and completely ignore the TPM.