PROJET AUTOBLOG


Richard Stallman's Political Notes

Site original : Richard Stallman's Political Notes

⇐ retour index

Everyone in the loop

samedi 23 novembre 2019 à 01:00

Sondland testified that Pence, Giuliani and Bolton all participated in the conman's shakedown of Ukraine.

Amazon face recognition in your home

vendredi 22 novembre 2019 à 01:00

Amazon has implemented face recognition for its Ring door cameras, just not enabled it yet.

Equity companies and medical service providers

vendredi 22 novembre 2019 à 01:00

Private equity companies are buying up lots of medical service providers and creating oligopolies that gouge helpless patients.

Determination of Hong Kong protesters

vendredi 22 novembre 2019 à 01:00

Report from Hong Kong: the astounding persistence and determination of the protesters, attacked over and over with chemical weapons and forbidden to protect themselves from them.

Bugs in TPM

vendredi 22 novembre 2019 à 01:00

Bugs made it possible to extract the private keys from TPMs and defeat their restrictions. What a shame that these bugs have been fixed!

The TPM was invented for treacherous computing, and the private key it contains was intended to enforce DRM restrictions. The idea was that the TPM would enable a web site to verify that your computer was running some officially authorized malicious program, rather than a replacement program that would not restrict you. Extracting the private key would give you the option to run a patched program that could bypass the DRM.

People have found ways to use TPMs for other purposes, jobs that are not oppressive. If you're using a TPM this way, the bugs would have worked against you. However, you don't need a TPM to do these things. Keys that you are forced to use but cannot extract or change can act as handcuffs, and we should not allow them in our computers.

We must learn to recognize the difference between true security, which works for the users, and tyrannical "security" which is meant to clamp down on the users (like the Hong Kong "security forces"). Breaking the former "security" can be bad. Breaking the latter is a victory.

Too bad these bugs could be fixed.