Hacker News Reader

Suspicion of TPMs has, so far, been just wrong. Most machines don't have TPMs; they're usually a feature on "business" laptops. Lenovo's ThinkPads have them, IdeaPads don't.

But now Windows 8.1 apparently makes OEMs ship a TPM to provide transparent device encryption for tablets - so it should become more commonplace. (It might only be for ARM devices though.) I'd assume those TPMs provide the full APIs and capabilities others do.

View on HN

Intel has a habit of trickling down features of "business chips" to the consumer chips. If I'm not mistaken, they may even be the same chips, Intel just disables those features for lower-end chips. So it's just a matter of time.

I think it's right to be very suspicious of these chips, especially since Intel has been awfully quiet despite all the accusations, and we do know that NSA has been trying to get "encryption hardware vendors" to subvert the encryption for them.

It also has virtual smartcard support using TPM which is such a good idea...

Reply on news.ycombinator.com