3 ms·
Where do you see that a trusted party has full access? Yes, the NSA could probably create a Windows build with a backdoor, and forge a signature that the TPM wo
by mseebach 13y ago
Where do you see that a trusted party has full access? Yes, the NSA could probably create a Windows build with a backdoor, and forge a signature that the TPM would accept, but they could (and probably did) just ask Microsoft to do that and save the bother.
What attack vector, exactly, does the TPM enable that isn't present pre-TPM?
- bad_user 13y agoBecause you can only install software approved by Microsoft, you cannot install software on it for detecting a backdoor installed by Microsoft. These computers are only more secure if you trust Microsoft. If Microsoft can't be trusted (and they can't be, as they are under NSA's jurisdiction), then the Windows 8 computers are less secure. But wait, it gets worse. At least in the case of MacBooks you only have to trust Apple, but in the case of Microsoft you also have to trust the computer manufacturer. And that's a really tough pill to swallow. I actually hope that Windows 8 will be banned by governments in the public sector, as Trusted Computing is a scourge upon this industry.
- ZanyProgrammer 13y agoUm, wait-Windows 8 will allow you to install any old x86 Windows program. Only Windows RT is locked down to such an extent. I hope HN doesn't have Slashdot levels of ignorance concerning Windows.
- throwawaykf02 13y ago> I hope HN doesn't have Slashdot levels of ignorance concerning Windows. Only Windows? HN also has Slashdot levels of ignorance concerning the legal system, patents, copyright, and the music industry, and these are only the topics I know something about. I avoid political discussions, but from what I'm told, those are just as misinformed. Note that I am no expert in those topics either. I just took the time and effort to research those on my own rather than accept the sound bites media puts out. When it comes to technology, there's probably no better place. (And even that I would caveat with an exception for Microsoft technologies, where you'll find more FUD than knowledge.) But basically for anything else, don't expect much from HN.
- bad_user 13y agoBefore jumping to conclusions, take your time and read about how rootkits work and why it is hard to detect rootkits. Also I love it when new users give warnings about HN's evolution.
- mseebach 13y agoIt doesn't make sense. TPM is only "less secure" for running a non-Windows OS, which isn't possible. Windows is the problem (security-wise), not TPM (which has many other problems) - isn't it exactly as secure for running Windows as running Windows on a non-TPM computer?
- josteink 13y agoMy point was merely that this TPM thing fundamentally boils down to giving up control over your own hardware to someone else. While it may not be a direct security risk per se, it represents a model of computing where the security-priorities are reversed as far as anyone not in the content-industry is concerned. Now... If Windows 8 is any worse in this regard than Windows 7 is probably questionable, but Windows 8 has had as a default OEM-configuration to be more locked down in "secure boot" and TPM-land than it used to be.
- mseebach 13y agoThere are plenty of good reasons to steer clear of TPM. Protecting yourself from the NSA just isn't one of them.