Reply to post: Well the problem with TPM is...

Samsung's Chromebook Pro: Overpriced vanilla PC with a stylus. 'Wow'

Christian Berger Silver badge

Well the problem with TPM is...

... that it claims to be able to do lots of things, like protecting your system from physical access or someone becoming root in order to modify your boot process. Obviously that's bollocks, since if your system has already been compromised that way, it makes very little sense to achieve persistence via the boot process. There are lots of other, much simper ways to do so.

That by itself wouldn't be a problem, but then there's the obvious problem of hardware vendors not allowing you to add new keys yourself... or making that particularly difficult to do. Microsoft already dropped the requirement to turn off the TPM, on ARM they even require it to not be possible to be turned off. Essentially we are now seeing the things people warned us about 20 years ago. Most smartphones already have locked bootloaders and if we are not careful, laptops and desktop computers might follow soon.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2019