Hacker News new | ask | show | jobs
by alex7734 531 days ago
The whole point of TPM is that the OS is not under the user control anymore.

If you modify it thanks to remote attestation you can no longer prove that it is unmodified using the TPM.
1 comments
2OEH8eoCRo0 531 days ago
Do they mean that no OS modification is necessary to read the decrypted media from memory?
link
alex7734 531 days ago
Currently, no. But once (undetectable) OS modification is no longer possible, making the undecrypted media unreadable is just a few API restrictions away.

In Android phones for example you cannot screenshot banking apps. And if you root (modify the OS of) your phone, banking apps refuse to work.

link
andrewaylett 529 days ago
However, for the question at hand, that's irrelevant: a better (for DRM) solution exists today, and they're already using it.

I'm not saying that the TPM is incapable of being abused by manufacturers and OS authors, but the FSF really weakens their argument when they predicate it on something that's not actually true. Ex falso quodlibet (you may prove anything if you rely on a falsehood).

link