Viewing profile — mkopec

> If all DVD players came with watermark detection instead of copy protection That is an enormous "if". Do you think Microsoft is going to or is able to enforce this on every singl…

Google SafetyNet is basically swiss cheese with lots of bypass solutions for custom ROMs. A TPM may only attest that it has received an expected set of measurements (hashes). As lo…

Widevine L1 requires a trusted execution environment for decrypting video and only showing it on HDCP monitors. It's built on top of Intel PAVP, AMD secure display, or ARM TrustZon…

> Does TPM support/requirements actually have any meaningful impact on a home user? Disk encryption, Windows Hello and PIN bruteforce prevention. I have no love Microsoft and avoid…

There are none. It's so immensely frustrating to me that so many people believe that a TPM is a DRM device. I'm sure Richard Stallman's Treacherous Computing article played a big p…

I think if the process was made easy, it would save quite a bit more than 1% of these devices from the landfill, assuming you have enough power users to build a community. Plenty o…

I firmly believe that permanent key fusing to lock bootloaders should be outlawed. At the very least the keys (and schematics) should be released once the device reaches EOL. Other…

Yeah, that's not something anyone should be saying to random people online.

Do Android Auto and VoLTE / VoWiFi work on Graphene these days? I also remember Google Maps and Uber being extremely problematic

Application Processor, i.e. the main processor

I would like to be able to ensure that only boot loaders signed with my private key can be executed. Secure Boot serves that purpose well, can I do that with your approach? Likewis…

Rust won't magically fix every vulnerability and someone would have to pay a team of engineers to rewrite everything.

Some piece of code has to configure the CPU, initialize memory before you can even think about loading an OS...

All Zen 1 CPUs and newer have the PSP / ASP security processor which is ARM based and runs before the x86 cores are released from reset. This applies to all Zen models, not just th…

I think ChromeOS Freon was close to what you're describing, but they ended up switching to Wayland at some point

Dropping a link to a project attempting to create a fully open source TPM: https://twpm.dasharo.com/

In what manner specifically does a TPM not belong to the user, while a YubiKey does?

Right, but then the crawler devs will google this weird 999 code and handle it as a 429. If I wanted to mess with clients I don't like, I'd just return a random valid code.

Disappointed with Lenovo's decision to enable PSB on my T14, having previously hoped one day I'd run coreboot on it, I decided to write a checker and crowdsource a list of PSB-enab…

Indeed, it seems that having another unlock option might be preferable. If you value your own live over the secrets, that is.

It's a matter of priorities, I guess? If you want to you can just not save the recovery password. In that case I guess they'll just beat you to death with that $5 wrench.