From: Marco Gerards <mgerards@xs4all.nl>
To: The development of GRUB 2 <grub-devel@gnu.org>
Subject: Re: TPM chip and Grub bootloader
Date: Thu, 31 May 2007 18:40:31 +0200 [thread overview]
Message-ID: <87zm3lhrpc.fsf@xs4all.nl> (raw)
In-Reply-To: <20070530232859.GB24702@coresystems.de> (Stefan Reinauer's message of "Thu, 31 May 2007 01:28:59 +0200")
Stefan Reinauer <stepan@coresystems.de> writes:
> * Robert Millan <rmh@aybabtu.com> [070530 15:18]:
>> IOW, no matter who the keys belong to, the problem is there's a component in
>> the hardware I paid for that is hostile to me, which contains keys that I
>> cannot retrieve (good, because of security), and refuses to use the keys on
>> anything I want it to (bad, because it's inherently an abusive tool).
>
> You do not need a TPM based system. Todays BIOSes prohibit flashing
> anything not signed by the vendor using SMI and hardware lockdown
> mechanisms. You are locked out already, even though you might not care
> or know yet.
That sounds terrible. How do you deal with this for LinuxBIOS?
--
Marco
next prev parent reply other threads:[~2007-05-31 16:35 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-05-24 8:41 TPM chip and Grub bootloader karmo
2007-05-24 8:59 ` Julien Ranc
2007-05-24 16:03 ` Robert Millan
2007-05-25 9:06 ` Patrick Georgi
2007-05-25 15:11 ` Bruno Wolff III
2007-05-30 13:18 ` Robert Millan
2007-05-30 23:28 ` Stefan Reinauer
2007-05-31 16:40 ` Marco Gerards [this message]
2007-06-01 0:13 ` Stefan Reinauer
2007-06-01 10:20 ` Klaus Weiss
2007-06-01 10:29 ` Klaus Weiss
2007-05-31 10:45 ` Patrick Georgi
2007-05-31 14:01 ` Robert Millan
2007-05-30 13:11 ` Robert Millan
2007-05-26 23:25 ` Jerone Young
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87zm3lhrpc.fsf@xs4all.nl \
--to=mgerards@xs4all.nl \
--cc=grub-devel@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.