16 ms·
I've been shouting at the void for years (https://gist.github.com/osy/45e612345376a65c56d0678834535166 https://gist.github.com/osy/45e612345376a65c56d0678834535
by osy 2y ago
I've been shouting at the void for years (https://gist.github.com/osy/45e612345376a65c56d0678834535166 https://gist.github.com/osy/45e612345376a65c56d0678834535166) about how TPM doesn't bring any practical security and was originally introduced for DRM then repurposed to sell "enterprise" security and now it's used as an excuse to force consumers to buy new PCs. TPM was designed by a committee who focused on designing the most secure gate without building a fence. There are many issues that Microsoft knew about for decades and never bothered to fix because security was never the goal.
- eesmith 2y agoThank you for the link. I enjoyed the read.
- antisthenes 2y agoThis can be said for 90% of all cargo-cult "infosec" initiatives. At best, you're gaining marginal security benefits at the cost of major productivity loss of power users and performance loss on older OS/hardware combinations.
- fsflover 2y agoI'm using TPM based on free software and with my own keys on my Librem 14 just fine, and it has no DRM. You're generalizing too much.
- TiredOfLife 2y agoWhat does TPM has to do with this? Microsoft is cutting support for CPU generations irrelevant to TPM support. It's just a cutoff CPU makers told them to add. There is an official Microsoft Long term security support version of Windows 11 that doesn't have any tpm or cpu age requirements (other than an instruction that was added to all cpus 15 years ago).