Hacker News Reader

Comment by Cumpiler69 | Hacker News Reader

>It is indeed a failed design. What you describe is how FV2 in Apple devices work. You have a native always-on DEK (Data Encryption Key) in the SEP (Secure Enclave Processor)

That's what TPM 2.0 is supposed to do on PC and why Microsoft is demanding it for Windows 11 yet people don't seem to see the need for it for some reason, then whine about the security implementation.

View on HN

Cause literally millions of devices will end up in landfills. Not figuratevelly, literally.

What happened to the MACs that had no secure enclave?

That’s whataboutism — Apple slowly has been precluding all of those from getting the latest updates officially (I think the iMac Pro is the last supported Mac without a T2 chip), and they’re ostensibly supposed to go into the landfill too, and that’s also bad!

It's not whataboutism, it was a very relevant question and possibly a precedent, no need to react aggressively.

For one, you can't implement blanket security features on an OS unless all devices have TPM 2.0, so all users who want the better security will have to have TPM 2.0 devices. Those who don't can stay on current hardware and use it till it falls apart.

Secondly, if Microsoft is bad for deprecating SW support for devices without HW security features why isn't the same uproar against Apple for doing the same?

I may not be hanging out in the right places, but the uproar seems to be about the same to me. I.e. for both of them, it’s a few angry comments online.

Reply on news.ycombinator.com