6 ms·
Another TPM thing? What problem do you have with the TPM?
by criddell 2y ago
Another TPM thing? What problem do you have with the TPM?
- heraldgeezer 2y agoIt being a Win11 requirement. It failing and triggering Bitlocker on our machines. It's just shit :) No I don't have another solution. Let me complain.
- dangus 2y agoWhat garbage hardware are you running where TPM is failing?
- kotaKat 2y agoEvery Windows Update that Lenovo kept pushing UEFI updates on their shiny new X13s with the Snapdragon and the Pluton chip in it kept tripping Bitlocker on every update. So, uh... Lenovo?
- semi-extrinsic 2y agoFWIW, my old corpo HP would also trigger Bitlocker sometimes on random shit, such as upgrading the firmware of the docking station. But that was usually fixable either by unplugging USB devices while booting, or just trying many reboots until Bitlocker suddenly decided everything was OK.
- mavhc 2y agoHad about 25% of our Dell laptops' TPM fail, got to know the repair technician well.
- 1oooqooq 2y agoTPM end game is to have identity tied to a device on pcs, just like the monopolies already have on Android and IOS. you know how google and apple dropped actual totp 2nd factor for their own accounts and force you to sign on another device to confirm signing on new devices? same thing.
- dangus 2y agoApple has SMS if you don’t own an Apple device. In fact, they require SMS to set up 2FA. They probably dropped totp because non-technical people can’t figure it out.
- olyjohn 2y agoSMS is not really great.
- throwaway48476 2y agoSMS is trivially exploitable. It has negative security value.
- ivewonyoung 2y agoTrivially? How?
- fragmede 2y agoI wouldn't call it trivial, but either a SS7 attack or by bribing the TMobile/Verizon/att store employee, you can get someone's SMS messages.
- dangus 2y agoSMS is the only 2FA method that the general public understands. It is absolutely better than nothing even if isn’t great.
- Brian_K_White 2y agoHell technical people can't figure it out. Everyone complains that it's fragile because what if their phone breaks, and those that think they know better, think it's because of the dozen one-time-use emergency codes. It's not their fault though. Every web site or service that offers totp and the most user-facing apps like google authenticator all scrupulously avoid telling you to save the seed value in the initial setup qr code. That short random string is all you need to have working totp on as many different devices as you want, set up a new one any time you want, and it's nothing but a simple static never-changing secret exactly like a password. You can wake up naked in a foreign country and be all back in a few minutes and without having to re-setup any sites or anything like that. That is, IFFFFF you have previously saved all the totp initial setup seed values right along with the passwords for those same accounts. If not, you can go do it right now.
- a1o 2y agoThe TPM thing that got hacked the other day?
- botanical 2y agoHundreds of millions of perfectly good PCs are going to be end-of-life due to this.
- rolph 2y ago-no not end of life, end of microsoft.