645
Fed-up Torvalds suggests disabling AMD’s 'stupid' performance-killing fTPM RNG (www.theregister.com)
submitted 3 years ago* (last edited 3 years ago) by to c/linux@lemmy.ml
153 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 3 years ago (1 child)

TPM actually provides some useful components to isolate encryption outside of Ring 0, which is a trust win. But any technology must be weighted against its power to oppress.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -1 points 3 years ago*

    And its power to make the system less secure. Isolating things outside ring 0 means malware can isolate itself outside ring 0 as well, and then it's impossible to detect or remove without throwing out the entire machine.

    Which is much, much scarier than anything an ordinary rootkit might do.

  • permalink
  • fedilink
  • source
  • parent