From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with archive (Exim 4.43) id 1Ld9Oq-0006nj-5C for mharc-grub-devel@gnu.org; Fri, 27 Feb 2009 15:33:36 -0500 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1Ld9On-0006jZ-B3 for grub-devel@gnu.org; Fri, 27 Feb 2009 15:33:33 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1Ld9Om-0006ia-NV for grub-devel@gnu.org; Fri, 27 Feb 2009 15:33:32 -0500 Received: from [199.232.76.173] (port=56647 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Ld9Om-0006i1-Bd for grub-devel@gnu.org; Fri, 27 Feb 2009 15:33:32 -0500 Received: from aybabtu.com ([69.60.117.155]:57937) by monty-python.gnu.org with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1Ld9Ol-00040S-9D for grub-devel@gnu.org; Fri, 27 Feb 2009 15:33:31 -0500 Received: from [192.168.10.10] (helo=thorin) by aybabtu.com with esmtp (Exim 4.69) (envelope-from ) id 1Ld9Hd-0006f7-K8 for grub-devel@gnu.org; Fri, 27 Feb 2009 21:26:10 +0100 Received: from rmh by thorin with local (Exim 4.69) (envelope-from ) id 1Ld9Oi-0008Lk-3f for grub-devel@gnu.org; Fri, 27 Feb 2009 21:33:28 +0100 Date: Fri, 27 Feb 2009 21:33:28 +0100 From: Robert Millan To: The development of GRUB 2 Message-ID: <20090227203328.GH31629@thorin> References: <499DF97E.1080800@student.ethz.ch> <200902200945.51426.michael@gorven.za.net> <20090221135142.GK16068@thorin> <20090221203928.GG18492@thorin> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Organization: free as in freedom X-Message-Flag: Worried about Outlook viruses? Switch to Thunderbird! www.mozilla.com/thunderbird X-Debbugs-No-Ack: true User-Agent: Mutt/1.5.18 (2008-05-17) X-detected-operating-system: by monty-python.gnu.org: Genre and OS details not recognized. Subject: Re: A _good_ and valid use for TPM X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: The development of GRUB 2 List-Id: The development of GRUB 2 List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Feb 2009 20:33:33 -0000 On Sun, Feb 22, 2009 at 03:02:43AM +0200, Alex Besogonov wrote: > Robert Millan wrote: >>> Private part of the endorsement key _never_ leaves the device (if >>> manufacturer uses the recommended TPM_CreateEndorsementKeyPair >>> method). Even device manufacturer doesn't know it. >> Even if that is true (which I doubt), it's merely incidental, because... > It's not really incidental. TCG was initially started as a group to > develop trusted computing platform. MS later tried to hijack it to > realize their wet dream of locked-down computer. Well, sounds like either the hijack was succesful, or the wet dream was shared. >>> Public key is then >>> signed by manufacturer's certificate. This ensures that the private >>> key can't be compromised. >> ...this ensures that $evil_bob can challenge you to prove you're running >> his proprietary anti-user software. > So I won't be able to answer $evil_bob challenge in any case, since I'm > mostly running Linux now. That depends on what he considers trusted. The capabilities are there and got merged in Linux tree. And who's scared of Vista anyways? ;-) -- Robert Millan The DRM opt-in fallacy: "Your data belongs to us. We will decide when (and how) you may access your data; but nobody's threatening your freedom: we still allow you to remove your data and not access it at all."