4 ms·
...but but but they are ISO certified!!! The only thing that TPM prevents from reading your hard drive is jealous coworkers. Everyone else just steals your lap
by cookiengineer 3y ago
...but but but they are ISO certified!!!
The only thing that TPM prevents from reading your hard drive is jealous coworkers. Everyone else just steals your laptop and gets access anyways.
Even the BIOS passwords are utterly useless because you can google the master passwords based on Laptop and model number these days. And if you can't, just flash a BIOS without a password on the memory chip via a 5$ ch341 adapter.
As long as all hardware has backdoors for everything and nothing relies on real cryptography, there is no point in assuming it is secure.
Embedded TPMs are the exception, for now, until one finds the next backdoor of broken undocumented CPU instructions. TPM was claimed to be secure so often in the past, at this point you must assume that every implementation is broken by default.
- BrandoElFollito 3y agoEveryone else steals your laptop, reinstalls Windows and sells it round the corner for 100€.
- cookiengineer 3y agoI never claimed that data theft and fencing hardware are mutually exclusive.
- BrandoElFollito 3y agoYou wrote "Everyone else just steals your laptop and gets access anyways". Nobody (as opposed to "everyone") will get access because nobody will try to do so. They will reinstall to resell. This is not a matter of exclusivity but of probability. If you split the world into "jealous coworkers" and "everyone else" then everyone else who wants your laptop does it to resell it and not access the data.
- zshrc 3y agoThere’s a certain Apple feature people like to hate on that works very well too…