5 ms·
People have been saying that for more than 10 years now, since the TPM was introduced. Yet you can still install Linux on PCs sold with Windows, you can still
by dist-epoch 2y ago
People have been saying that for more than 10 years now, since the TPM was introduced.
Yet you can still install Linux on PCs sold with Windows, you can still install third party software on Windows not from a Store, you can still watch pirated movies downloaded from torrents.
You can even run an unregistered/unpaid version of Windows if you don't mind that it will not let you change the desktop background image.
- croes 2y agoAnd Windows PCs are still not safe. So either way it fails it's purpose
- dist-epoch 2y agoMost Windows PCs have Secure Boot enabled the many have the drives encrypted with Bitlocker.
- doubled112 2y agoWhat does that do for me to stop malware? Bitlocker is only protecting an offline system Also consider that some keys for Secure Boot have been compromised.
- dist-epoch 2y agoSo I guess then your computer does not have a form of Secure Boot enabled, and your drives are not encrypted. Makes sense, more secure.
- doubled112 2y agoI’m using Linux and LUKS but have never been convinced Secure Boot adds anything for me. It does sometimes add extra steps though, or block a driver from loading.
- dist-epoch 2y ago> What does that do for me to stop malware? Bitlocker is only protecting an offline system LUKS also only protects an online system. So why are you using it? Oh, I think I know, if you are on Windows it's bad to use BitLocker because it's made by Microsoft and it doesn't protect against malware, but if you're on Linux of course you use LUKS, it's a sensible thing to do. Got it.
- croes 2y agoThe point is Linux doesn't enforce useless hardware that on top could be used against the user. Same with MS's recall feature. A Windows PC is just C but not P anymore.
- doubled112 2y agoBack in my retail computer technician and sales days, it wasn’t uncommon for somebody to lose their Bitlocker keys, and encryption did what it was designed to do - make the data unreadable without them. Sometimes they didn’t even understand what they enabled. To that customer, Bitlocker itself was a threat. In my small sample size, I’ve seen that more often than lost laptops. I’ve also seen many more malware infections. Tying encryption to the TPM, which is the default, makes it easier to lose those keys. With LUKS I choose my own password. It’s an important implementation difference, especially if it is going to do it by default. Warning a person “you will lose all data if you don’t write this down” in big bold red text is sometimes not enough. Does tying those keys to your MS account fix that failure method?
- EvanAnderson 2y ago> Does tying those keys to your MS account fix that failure method? Yes. Bitlocker recovery keys are escrowed to the Microsoft account. I've relied on this recover data from a family member's PC when it failed and they had unknowingly opted-in to Bitlocker (a Microsoft Surface Laptop running Windows 10 S Mode).
- r2_pilot 2y ago
- heraldgeezer 2y agoIf it's a desktop, who cares? Secure boot and BitLocker for the enterprise laptops, sure. For gamers/hackers/hobbyists, why?
- layer8 2y agoMore accurately, unbreakable security as enabled by hardware TPMs also enables unbreakable vendor lock-in like we have with iOS. Pick your poison.
- heraldgeezer 2y agoFor now. The cogs will turn slowly towards our demise.
- nulld3v 2y agoOr you can recognize that app/game developers are starting to require Secure Boot enforcement if you want to continue to use their apps or play their games. RIOT requires users to enable TPM-enforced Secure Boot starting with Windows 11 to play Valorant: https://support-valorant.riotgames.com/hc/en-us/articles/10088435639571-Troubleshooting-the-VAN9001-or-VAN-9003-Error-on-Windows-11-VALORANT https://support-valorant.riotgames.com/hc/en-us/articles/100...
- dist-epoch 2y agoLet me tell you a secret: it's because the gamers are demanding that. The game companies couldn't care less if there are cheaters in the game, but it's the players which put huge pressure on the game companies to detect and ban cheaters.
- heraldgeezer 2y agoBut it allows Windows 10 without TPM.
- 71bw 2y agoIf your account gets flagged for ANY sort of irregular behaviour, you immediately get "upgraded" to requiring TPM and Secure Boot. Been there, done that - a crack for VEGAS Pro I used turned on test signing via registry for whatever reason and VALORANT REALLY didn't like that - and because of the PC I was using at the time that was the end of my VALORANT career.
- tpxl 2y agoGamers arent demanding this. There are tons of ways to detect cheaters, the most effective one being human moderation. But no, companies wont do MaNuAl WoRk because it doesnt sCaLe, even though they have more than enough cash in the bank.
- dgellow 2y agoHow do you do manual moderation on a massive fast-paced game like Valorant? It’s correct, that doesn’t scale
- beeboobaa3 2y agoFor now. It's not ubiquitous enough yet. Games are already starting to require secure boot, the rest will follow in a few years.
- ineptech 2y agoPeople will keep saying it, because that ratchet only seems to go one way. Consumer access to general purpose computing is something we take for granted, but every year it seems like there's a bit less of it, and once we lose it we will never get it back.
- pbhjpbhj 2y agoYes, and Microsoft will still have regular "accidents" where they wipe out your ability to boot your Linux install, oh oopsy. They should be prosecuted for that shit.