Hacker News new | ask | show | jobs
by ottah 107 days ago
Ah, I see. It's just another fucking tpm, which let's venders approve or deny execution of signed binaries. So more infrastructure to attack general computing.
1 comments

No, TPMs and HSMs are fundamentally nothing more than secure hardware dedicated to storing private keys in a way that makes accessing the plaintext incredibly hard. All of modern computer security is based on them.
... and usually deployed in a user-hostile manner.
Any evidence of this? Computer security was a complete disaster before hardware roots of trust became standard.
> Computer security was a complete disaster

It is still a complete disaster. Nobody needs the password to your bootloader when it can access all your data through your web browser.

That isn't possible.
Both things can be true.
The knee-jerk hysterical reaction to any talk of hardware roots of trust on Hacker News is getting tiresome and I expect better given the reputation of the site. It actually reminds me of old slashdot.
The software running on such devices is usually proprietary and never installed by the user. That is user-hostile.