zlacker

It doesn't prove that your device is secure at all. It just "secures" it from the user, not from malware. Even if it's signed and approved, malware can still hijack it....

>>Pannon+(OP)
Okay let me rephrase it. The point is to be able to prove what software is running for the purpose of being able to tell when software deemed as secure is running.

>Even if it's signed and approved, malware can still hijack it....

At which point the vulnerability in the software or hardware should be fixed and the old version should be blacklisted.

>>charci+n1
So every time anyone finds a new CVE in Windows, we're going to blacklist every single Windows machine until it's patched? I mean, that would be hilarious, but that's not how it will ever actually be implemented.

>>yjftsj+LW1
>So every time anyone finds a new CVE in Windows, we're going to blacklist every single Windows machine until it's patched?

Failing attestation does not mean you get blacklisted. It means that you are not as trustworthy. Not every CVE breaks an OS's security model.