6 ms·

> but are those features that people actually care about? The users? No. The corporations that make DRM? Yes.

Cumpiler69 2y ago
To corporations period regardless if they make DRM or not. Enterprises want any and all features under the security umbrella for their fleets.
gruez 2y ago
What are some examples of DRM that uses TPM? What does TPM provide that stuff like SGX (which is already used in DRM) doesn't provide?
- mkopec 2y ago
  There are none. It's so immensely frustrating to me that so many people believe that a TPM is a DRM device. I'm sure Richard Stallman's Treacherous Computing article played a big part in this. A TPM is useless for DRM, and there are way more suited solutions like Intel's PAVP that takes an encrypted video stream and puts it on the screen directly, yet I don't see nearly as much uproar about that.
  - zinekeller 2y ago
    In a sense, graphics cards are the root-of-trust for PC-based DRMs (as they implement the necessary components such as HDCP authentication), not the TPM (which is useless for this task). In fact, PlayReady (which is Microsoft's DRM solution) does this exact thing: https://learn.microsoft.com/en-us/windows/uwp/audio-video-camera/hardware-drm#:~:text=Windows%20implements%20the%20OEM%20proxy%20layer%20and%20transfers%20the%20serialized%20PRITEE%20functions%20calls%20to%20a%20user%20mode%20driver%20in%20the%20Windows%20Media%20Foundation%20subsystem.%20This%20will%20eventually%20get%20routed%20to%20either%20the%20Windows%20TrEE%20(Trusted%20Execution%20Environment)%20driver%20or%20the%20OEM%E2%80%99s%20graphics%20driver. https://learn.microsoft.com/en-us/windows/uwp/audio-video-ca... (...or use things such as the already-dead Intel SGX, which never touched TPMs at all)
  - deno 2y ago
    It goes TPM → OS Integrity (dm-/fs-verity) → Browser Attestation (Web Integrity) → Your banking website no longer working on Linux because of "security". It’s Play Integrity for the PC. Encrypted video is a red herring. The real long game is to also get your "secure" video player to refuse playback if it detects watermark in the pirated video. This patches the analog hole. If you have attested Windows it can just refuse to download "freeworld" VLC because it can be used for piracy and/or even watching child pornography. Imagine that! Of course you can use Linux instead but now you have to use the approved distro that also won’t let you run "dangerous" apps. This is of course slippery slope argument and Microsoft would not be able to force all that right now, but better get started on the foundations. Some future government can then just force them to implement the rest, but by then it will be just a flip of a switch. "TPM is not DRM" argument seriously lacks imagination.
    - mkopec 2y ago
      Google SafetyNet is basically swiss cheese with lots of bypass solutions for custom ROMs. A TPM may only attest that it has received an expected set of measurements (hashes). As long as discrete TPMs or PCs with unlocked CPUs exist (w/o Boot Guard), one may simply take a TPM and replay "golden" measurements to it. Bypassing this would be trivially easy. A TPM does not have control over execution on the CPU. It only receives data from the CPU. If you have control over execution on the CPU from the reset vector, you can just replay whatever you want to a TPM and extract secrets that way. That's why TPM backed disk encryption without configuring a PIN is insecure. Microsoft does not have the same level of control over the entire PC ecosystem as Google has over Android. That's why it's important to support open source alternatives.
      - deno 2y ago
        And that’s why Play Integrity is based on hardware attestation and it is no longer a swiss cheese? And Win11 requires specifically TPM 2.0 (usually fTPM) not just any TPM. You’re also entirely missing the point. Yes, you can bypass TPM based DRM to extract the unencrypted video (or just analog hole it) that’s why the game is to lock down the OS so you just can’t play it. If all DVD players came with watermark detection instead of copy protection you wouldn’t have bootlegs because now every single client device needs to do the bypass instead of just once to extract unencrypted stream. How many people have bypassed or hardware modded Playstations or Switches? This is what you’re talking about. Almost everyone will just accept it.
- reginald78 2y ago
  Valorant requires it for anticheat. The purpose is to prevent users from running unauthorized software on the computers they allegedly own. I wouldn't expect many examples to exist yet. You want to wait until almost everyone is on Windows 11 before you get up to those shenanigans.
  - p_ing 2y ago
    Valorant uses VBS, which in turn requires TPM 2.0. Valorant isn't directly leveraging TPM. https://support-valorant.riotgames.com/hc/en-us/articles/16941220890899-Addressing-Virtualization-based-security-VBS-settings-on-Windows-10-VAN9005-VALORANT https://support-valorant.riotgames.com/hc/en-us/articles/169...
    - Avamander 2y ago
      They're leveraging TPMs in the sense that they're banning specific ones.
      - reginald78 2y ago
        I can't remember if this was Valorant related but I recall an article voicing concerns that physical hardware in PCs being used to identify users to ban and that the ban would persist when you purchased a used motherboard. Not a great general concern to me for games but the idea has much more sinister potential than just that.
  - techjamie 2y ago
    > The purpose is to prevent users from running unauthorized software on the computers they allegedly own. I've maintained for several years now that the actual corporate wet dream is that they can lock down the average PC architecture/OS to the same degree they have on phones. Because unfortunately, in the phone sector, the market has already shown the majority of users don't care who really owns their devices. My hope is that Linux gets wide enough adoption to prevent that from becoming a feasible option for them in the future.
- bluescrn 2y ago
  Given trends of everything going subscription-only, is it unreasonable to suspect that the future of Windows could be subscription-only and a lot harder to pirate than previously?
  - beretguy 2y ago
    I hope windows will become subscription only so that people finally stop using it.
- bayindirh 2y ago
  IIRC widewine requires TPM for highest quality (level1)?
  - p_ing 2y ago
    Widevine Level 1 requires a Trusted Execution Environment. Nothing to do with TPM.
    - bayindirh 2y ago
      My bad, then.
  - mkopec 2y ago
    Widevine L1 requires a trusted execution environment for decrypting video and only showing it on HDCP monitors. It's built on top of Intel PAVP, AMD secure display, or ARM TrustZone in the case of ARM chromebooks and Android devices. TPM is not involved, except in the ARM case where I believe it is used for antirollback counters (on x86, the security coprocessor would probably have that responsibility).
- toast0 2y ago
  SGX is used for DRM in official Blu-Ray 4K playback on PCs, and Intel removed SGX from client cpus in 11th gen (Ice Lake) which means if you want to play those discs on a PC, you either need an older processor or a Xeon or to give in and use unauthorized software. I'm not sure that tying their horse to SGX is good for adoption of the format.
  - deno 2y ago
    Ice Lake is 10th gen and last gen with SGX on consumer SKUs.
naikrovek 2y ago
Remember boot-sector viruses? The TPM helps prevent those. DRM is not something that the TPM enables or helps with or facilitates in any way. Please read this, and do your part to make the world a bit more educated, on average: https://en.wikipedia.org/wiki/Trusted_Platform_Module#Overview https://en.wikipedia.org/wiki/Trusted_Platform_Module#Overvi... If you don't dismiss my comment as the comment of a corporate shill, you might learn something, and in the future that knowledge may help you. I don't know, I can't predict the future, but I do know that ignorance is dumb.
- LegionMammal978 2y ago
  > Remember boot-sector viruses? The TPM helps prevent those. DRM is not something that the TPM enables or helps with or facilitates in any way. ¿Porque no los dos? As noted elsewhere in this thread, TPM certainly facilitates VBS [0], and games like Valorant are already using that for anticheat [1]. As long as application programs can use it to help detect the environment being 'tampered' with (as opposed to the system just wrapping it up in a report for the user), they can use it to protect their particular application state, and I don't see why that shouldn't include DRM state. [0] https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-vbs https://learn.microsoft.com/en-us/windows-hardware/design/de... [1] https://support-valorant.riotgames.com/hc/en-us/articles/16941220890899-Addressing-Virtualization-based-security-VBS-settings-on-Windows-10-VAN9005-VALORANT https://support-valorant.riotgames.com/hc/en-us/articles/169...
- cesarb 2y ago
  > Remember boot-sector viruses? The TPM helps prevent those. What prevents boot sector viruses is Secure Boot, not TPM.
  - Avamander 2y ago
    True, but someone disabling Secure Boot will cause the TPM not to release BitLocker keys. Making attempts at subverting it noisier.

To corporations period regardless if they make DRM or not. Enterprises want any and all features under the security umbrella for their fleets.

gruez 2y ago

What are some examples of DRM that uses TPM? What does TPM provide that stuff like SGX (which is already used in DRM) doesn't provide?

mkopec 2y ago
There are none. It's so immensely frustrating to me that so many people believe that a TPM is a DRM device. I'm sure Richard Stallman's Treacherous Computing article played a big part in this. A TPM is useless for DRM, and there are way more suited solutions like Intel's PAVP that takes an encrypted video stream and puts it on the screen directly, yet I don't see nearly as much uproar about that.
- zinekeller 2y ago
  In a sense, graphics cards are the root-of-trust for PC-based DRMs (as they implement the necessary components such as HDCP authentication), not the TPM (which is useless for this task). In fact, PlayReady (which is Microsoft's DRM solution) does this exact thing: https://learn.microsoft.com/en-us/windows/uwp/audio-video-camera/hardware-drm#:~:text=Windows%20implements%20the%20OEM%20proxy%20layer%20and%20transfers%20the%20serialized%20PRITEE%20functions%20calls%20to%20a%20user%20mode%20driver%20in%20the%20Windows%20Media%20Foundation%20subsystem.%20This%20will%20eventually%20get%20routed%20to%20either%20the%20Windows%20TrEE%20(Trusted%20Execution%20Environment)%20driver%20or%20the%20OEM%E2%80%99s%20graphics%20driver. https://learn.microsoft.com/en-us/windows/uwp/audio-video-ca... (...or use things such as the already-dead Intel SGX, which never touched TPMs at all)
- deno 2y ago
  It goes TPM → OS Integrity (dm-/fs-verity) → Browser Attestation (Web Integrity) → Your banking website no longer working on Linux because of "security". It’s Play Integrity for the PC. Encrypted video is a red herring. The real long game is to also get your "secure" video player to refuse playback if it detects watermark in the pirated video. This patches the analog hole. If you have attested Windows it can just refuse to download "freeworld" VLC because it can be used for piracy and/or even watching child pornography. Imagine that! Of course you can use Linux instead but now you have to use the approved distro that also won’t let you run "dangerous" apps. This is of course slippery slope argument and Microsoft would not be able to force all that right now, but better get started on the foundations. Some future government can then just force them to implement the rest, but by then it will be just a flip of a switch. "TPM is not DRM" argument seriously lacks imagination.
  - mkopec 2y ago
    Google SafetyNet is basically swiss cheese with lots of bypass solutions for custom ROMs. A TPM may only attest that it has received an expected set of measurements (hashes). As long as discrete TPMs or PCs with unlocked CPUs exist (w/o Boot Guard), one may simply take a TPM and replay "golden" measurements to it. Bypassing this would be trivially easy. A TPM does not have control over execution on the CPU. It only receives data from the CPU. If you have control over execution on the CPU from the reset vector, you can just replay whatever you want to a TPM and extract secrets that way. That's why TPM backed disk encryption without configuring a PIN is insecure. Microsoft does not have the same level of control over the entire PC ecosystem as Google has over Android. That's why it's important to support open source alternatives.
    - deno 2y ago
      And that’s why Play Integrity is based on hardware attestation and it is no longer a swiss cheese? And Win11 requires specifically TPM 2.0 (usually fTPM) not just any TPM. You’re also entirely missing the point. Yes, you can bypass TPM based DRM to extract the unencrypted video (or just analog hole it) that’s why the game is to lock down the OS so you just can’t play it. If all DVD players came with watermark detection instead of copy protection you wouldn’t have bootlegs because now every single client device needs to do the bypass instead of just once to extract unencrypted stream. How many people have bypassed or hardware modded Playstations or Switches? This is what you’re talking about. Almost everyone will just accept it.
reginald78 2y ago
Valorant requires it for anticheat. The purpose is to prevent users from running unauthorized software on the computers they allegedly own. I wouldn't expect many examples to exist yet. You want to wait until almost everyone is on Windows 11 before you get up to those shenanigans.
- p_ing 2y ago
  Valorant uses VBS, which in turn requires TPM 2.0. Valorant isn't directly leveraging TPM. https://support-valorant.riotgames.com/hc/en-us/articles/16941220890899-Addressing-Virtualization-based-security-VBS-settings-on-Windows-10-VAN9005-VALORANT https://support-valorant.riotgames.com/hc/en-us/articles/169...
  - Avamander 2y ago
    They're leveraging TPMs in the sense that they're banning specific ones.
    - reginald78 2y ago
      I can't remember if this was Valorant related but I recall an article voicing concerns that physical hardware in PCs being used to identify users to ban and that the ban would persist when you purchased a used motherboard. Not a great general concern to me for games but the idea has much more sinister potential than just that.
- techjamie 2y ago
  > The purpose is to prevent users from running unauthorized software on the computers they allegedly own. I've maintained for several years now that the actual corporate wet dream is that they can lock down the average PC architecture/OS to the same degree they have on phones. Because unfortunately, in the phone sector, the market has already shown the majority of users don't care who really owns their devices. My hope is that Linux gets wide enough adoption to prevent that from becoming a feasible option for them in the future.
bluescrn 2y ago
Given trends of everything going subscription-only, is it unreasonable to suspect that the future of Windows could be subscription-only and a lot harder to pirate than previously?
- beretguy 2y ago
  I hope windows will become subscription only so that people finally stop using it.
bayindirh 2y ago
IIRC widewine requires TPM for highest quality (level1)?
- p_ing 2y ago
  Widevine Level 1 requires a Trusted Execution Environment. Nothing to do with TPM.
  - bayindirh 2y ago
    My bad, then.
- mkopec 2y ago
  Widevine L1 requires a trusted execution environment for decrypting video and only showing it on HDCP monitors. It's built on top of Intel PAVP, AMD secure display, or ARM TrustZone in the case of ARM chromebooks and Android devices. TPM is not involved, except in the ARM case where I believe it is used for antirollback counters (on x86, the security coprocessor would probably have that responsibility).
toast0 2y ago
SGX is used for DRM in official Blu-Ray 4K playback on PCs, and Intel removed SGX from client cpus in 11th gen (Ice Lake) which means if you want to play those discs on a PC, you either need an older processor or a Xeon or to give in and use unauthorized software. I'm not sure that tying their horse to SGX is good for adoption of the format.
- deno 2y ago
  Ice Lake is 10th gen and last gen with SGX on consumer SKUs.

naikrovek 2y ago

Remember boot-sector viruses? The TPM helps prevent those. DRM is not something that the TPM enables or helps with or facilitates in any way. Please read this, and do your part to make the world a bit more educated, on average: https://en.wikipedia.org/wiki/Trusted_Platform_Module#Overview https://en.wikipedia.org/wiki/Trusted_Platform_Module#Overvi... If you don't dismiss my comment as the comment of a corporate shill, you might learn something, and in the future that knowledge may help you. I don't know, I can't predict the future, but I do know that ignorance is dumb.

LegionMammal978 2y ago
> Remember boot-sector viruses? The TPM helps prevent those. DRM is not something that the TPM enables or helps with or facilitates in any way. ¿Porque no los dos? As noted elsewhere in this thread, TPM certainly facilitates VBS [0], and games like Valorant are already using that for anticheat [1]. As long as application programs can use it to help detect the environment being 'tampered' with (as opposed to the system just wrapping it up in a report for the user), they can use it to protect their particular application state, and I don't see why that shouldn't include DRM state. [0] https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-vbs https://learn.microsoft.com/en-us/windows-hardware/design/de... [1] https://support-valorant.riotgames.com/hc/en-us/articles/16941220890899-Addressing-Virtualization-based-security-VBS-settings-on-Windows-10-VAN9005-VALORANT https://support-valorant.riotgames.com/hc/en-us/articles/169...
cesarb 2y ago
> Remember boot-sector viruses? The TPM helps prevent those. What prevents boot sector viruses is Secure Boot, not TPM.
- Avamander 2y ago
  True, but someone disabling Secure Boot will cause the TPM not to release BitLocker keys. Making attempts at subverting it noisier.