Trusted Computing? Yes or No
Robin Good1 HN recommenders · 2014–2023
47K views · explainer · dated · Uploaded 2006-03-18
A four-minute 2006 explainer on trusted computing, describing what it is and whether users should support it, with a skeptical DRM angle.
Cited as an easy-to-understand framing of trusted computing and TPMs as tools that can treat users as threats.
1:01:20Indistinguishable From Magic: Manufacturing Modern Computer Chips
Andor Gafotas
51:32Behind the Scenes of iOS Security
Black Hat
56:09Project Code Rush - The Beginnings of Netscape / Mozilla Documentary
The Documentary Network
12:01Why Electronic Voting Is Still A Bad Idea
Tom Scott
51:22USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
42:50Defcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
1:46:51"Money doesn't interest me" - Ton Roosendaal 2017 Interview
Blender Guru
59:2328c3: The Science of Insecurity
28c3
4 comments from Hacker News
It's really simple. Trust is a mutual relation. I.e. since DRM always views users as potential criminals, it's natural always to view DRM as potential malware (and thus a security threat). Here it's put in easy to understand terms: [VIDEO] Practice proves that point spectacularly, because DRM always has an overreaching unethical nature (since it's an overreaching preemptive policing which uses the logic of presumption of guilt). As the Sony exec voiced the core idea behind DRM: > We will develop technology that transcends the individual user. We will firewall Napster at source - we will block it at your cable company. We will block it at your phone company. We will block it at your ISP. We will firewall it at your PC... These strategies are being aggressively pursued because there is simply too much at stake. (See [LINK] ). I.e. overreaching nature of DRM straight from the DRM proponents mouth. And it applies to all DRM by its very definition.
> "Digital Rights Management" -- you know, words mean something. They mean what they were designed for. And that is excessive preemptive policing. About "trusted execution" you are wrong. Original meaning of trusted execution is exactly about security, not about DRM. Actual usage of that term is more than often happens to be about DRM (which is conflicting with security actually, because DRM can be viewed as a security risk). See [VIDEO] If you constantly mix up security, authentication, trusted execution with DRM, I think you should consider your own level of knowing what you are talking about. I explained everything above.
Sure it's fantastic in a corporate environment. Not so fantastic for personal devices. Basically this: [VIDEO]
Good? It was never intended to do so. ) Also, made me remember (once again) decade old presentation on TPM: [VIDEO]