floofloof@lemmy.ca to Linux@lemmy.mlEnglish · edit-22 年前Fed-up Torvalds suggests disabling AMD’s 'stupid' performance-killing fTPM RNGwww.theregister.comexternal-linkmessage-square187fedilinkarrow-up1653arrow-down18
arrow-up1645arrow-down1external-linkFed-up Torvalds suggests disabling AMD’s 'stupid' performance-killing fTPM RNGwww.theregister.comfloofloof@lemmy.ca to Linux@lemmy.mlEnglish · edit-22 年前message-square187fedilink
minus-squareinterdimensionalmeme@lemmy.mllinkfedilinkarrow-up94arrow-down7·2 年前I always just kill my TPM chip. It’s so obvious tpm will be used in the future for application offline DRM. They will executed encrypted operations under the TPM veil and decompilers will become unusable.
minus-squareinterdimensionalmeme@lemmy.mllinkfedilinkarrow-up17arrow-down2·edit-22 年前Level 1, turn off in bios Level 2, desolder from motherboard Level 3, remove cpu pins related to tpm Level 4, decap cpu, laser off tpm bus or blocks
minus-squaregnutrino@programming.devlinkfedilinkarrow-up4·2 年前Level 5, throw computer into a volcano and go live in the woods using no technology more complex than a flint and steel.
minus-squareMigratingtoLemmy@lemmy.worldlinkfedilinkarrow-up1·2 年前Thank you, the best I can do is level 2 (once I learn how to solder)
minus-squarextapa@feddit.delinkfedilinkarrow-up1·2 年前Just disabled it in BIOS/UEFI. Should I disable security device support too, or doesn’t it matter when fTPM is disabled?
minus-squareinterdimensionalmeme@lemmy.mllinkfedilinkarrow-up1·2 年前Or depends what they mean by security service support. Presumably some kind of external (usb ?) device ?
I always just kill my TPM chip. It’s so obvious tpm will be used in the future for application offline DRM. They will executed encrypted operations under the TPM veil and decompilers will become unusable.
How do you kill your TPM chip?
Level 1, turn off in bios
Level 2, desolder from motherboard
Level 3, remove cpu pins related to tpm
Level 4, decap cpu, laser off tpm bus or blocks
Level 5, throw computer into a volcano and go live in the woods using no technology more complex than a flint and steel.
Thank you, the best I can do is level 2 (once I learn how to solder)
Disable it in the bios
Just disabled it in BIOS/UEFI. Should I disable security device support too, or doesn’t it matter when fTPM is disabled?
Or depends what they mean by security service support. Presumably some kind of external (usb ?) device ?