3 ms·
The TPMs are already provided with boot and OS measurements for secure boot purpose which would allow DRM to confirm you use an approved OS kernel, so I guess t
by forty 2y ago
The TPMs are already provided with boot and OS measurements for secure boot purpose which would allow DRM to confirm you use an approved OS kernel, so I guess the computer is already conspiring. And the conspiracy could be enforced by videos distributors in exchange for the privilege of having HD content.
- mjg59 2y agoIt could, but why? They've come up with a solution that avoids having to place any trust in the OS at all, so why introduce additional complexity and fragility?
- forty 2y agoI don't know, maybe because not everyone has the right GPU with DRM, while the TPM is conveniently mandatory? :)
- lxgr 2y agoMandatory where? Most of the devices people are streaming video to these days aren't even PCs! Macs haven't had TPMs for a while now (I think Apple never really used it and dropped it even before the Apple Silicon switch), but of course they have their proprietary equivalent.
- mjg59 2y agoIf they don't have a GPU that implements this then the decrypted material would be available to the OS, which is precisely what the streaming media platforms want to avoid.
- forty 2y agoIt's because they don't trust the OS not to leak the decrypted bytes, but they could thanks to TPM (the OS would have to have a memory memory chunk not readable from admin/root etc). In this scenario the OS is part of the DRM.
- mjg59 2y agoMicrosoft is extremely chill about admin-to-kernel privesc, so that's not a meaningful barrier.