48 karma · joined March 11, 2021
There is guidance on "Active" attacks [1], which is to set up your TPM secrets so they additionally require a signature from a secret stored securely on the CPU. But that only addresses secret storage, and does nothing about the compromised measurements. I also don't know what would be capable of providing the CPU secret for x86 processors besides... an embedded/firmware TPM.
[1] https://trustedcomputinggroup.org/wp-content/uploads/TCG_-CP...
[1] Might be https://gitlab.gnome.org/GNOME/gtk/-/issues/5984
I reckon it can probably stream at 4K@120 if it can game at half that.
It probably would have to be an isolated environment to run in. Something like the Secure VM efforts adopted for desktops, perhaps with a small trusted hypervisor instead of CPU vendor extensions. Anything else I can think of starts to restrain what software you can run on your machine, or becomes highly invasive in ways similar to Anti-Cheats on Windows, both of which would be rejected by the general Linux community. (Through, it's not like anyone was asking Microsoft either before implementing anti-cheat and trampling on system integrity, at least until Microsoft started requiring signed drivers)
However, given that a generic blackbox implementation enables DRM and binary encryption there will probably still be opposition. It gets particularly nasty if it's given access to something like a full TPM to unlock application data in the same way a TPM can unlock an encrypted drive for your OS. That would make it the penultimate closed source application, which is really anti-ethical to a number of communities. (open source, modding, game/app preservation...)
> Only 50% of girls sent 10 likes in their account lifespan.
> 10% of girls that finish the onboarding never send any pass or like, ...
> We have plenty of girls that can scroll through 300 profiles and not like anyone and deleting their account saying "I dont like anyone" well
Rough timeline for my laptop was:
14 months in, manually under-clocked discrete GPU to prevent thermal shutdowns
20 months in, complete cooling failure on GPU, replaced liquid metal with PTM7950
However I do got one where UEFI boots the linux kernel directly, /boot is the EFI parition. And there it feels like a bit of a waste to have to expand /boot or insert a bootloader into the boot process because initramfs is getting bloated with files that aren't critical to mounting root.
> I recommend Will Deacon’s talks, such as this one and this one.
They're both the same link! Is the talk that amazing, or is there a second one? I've been looking into ARM lately, and I'll take anything that'll help me understand memory ordering/synchronization.