At that point we've digressed from a conversation about forensics, root access, and switching the OS to one about the evils of widespread remote attestation. I

At that point we've digressed from a conversation about forensics, root access, and switching the OS to one about the evils of widespread remote attestation. I agree that centralized and ubiquitous remote attestation is evil. So disable it. Don't use services that require it. Don't use anything that requires DRM either, since that's one of the primary driving forces. > Even with all the various hacks enabled. Those were never going to work long term. Hardware based remote attestation can't realistically be bypassed by the end user.