[UltraSane]

Any evidence of this? Computer security was a complete disaster before hardware roots of trust became standard.

[hulitu]

> Computer security was a complete disaster

It is still a complete disaster. Nobody needs the password to your bootloader when it can access all your data through your web browser.

[UltraSane]

That isn't possible.

[NewJazz]

Both things can be true.

[UltraSane]

The knee-jerk hysterical reaction to any talk of hardware roots of trust on Hacker News is getting tiresome and I expect better given the reputation of the site. It actually reminds me of old slashdot.

[pabs3]

The software running on such devices is usually proprietary and never installed by the user. That is user-hostile.

[UltraSane]

What software?

[pabs3]

The firmware implementing TPM functionality, which definitely exists in at least some cases:

https://en.wikipedia.org/wiki/Trusted_Platform_Module#Field_...

For ASIC-only devices, the keys are burned-in, which is user-hostile too.

[UltraSane]

Is the firmware in my NIC user-hostile?