zlacker

Do you want desktop PC vendors locking down hardware to enforce integrity?

>>nicksl+(OP)
Want do you think Windows 11, latest macOS, ChromeOS hardware requirements are all about?

CoPilot+ PCs even require the same security chip as XBox and Azure Sphere IoT board (Pluton), in addition to TPM 2.0.

https://learn.microsoft.com/en-us/windows/security/hardware-...

>>pjmlp+P1
Well, yeah. There’s no way to curb the modern cheating epidemic without increasing security measures. Riot Games via Valorant truly pushed the industry so far ahead by reducing their cheating percentages so low that the cost to cheat for more than a few weeks at a time is thousands of dollars a month.

It’s not the sole reason, but it’s a solid one.

>>nicksl+(OP)
I don't want integrity on my mobile so why would I want it on my desktop?

>>hhh+E3
They have some other secret sauce for sure, there's tons of cheaters on console which is a vastly more locked down platform compared to pc.

>>realus+1b
Exactly, remote attestation is only acceptable on your own devices with remote attestation servers that you control.

For example, it would be completely fine to implement remote attestation where devices issued by companies to employees verify their TPM values with company's servers when connecting via VPN.

All other such activities directly infringe on ownership rights.

>>zekica+lf
I don't see the value of remote attestation period. Especially when we talk about the mobile world which is a jungle where even the manufacturer itself doesn't have the full picture of all the code running on the device.

Yeah sure it's guarantees that the device is more or less similar as from the factory... and then what? What am I supposed to do with that information?

>>realus+dg
It can be valuable on devices *you own* with servers *you own* when the devices are not physically present (or even if they are).

You can get PCR values and decide if the device you are talking to is tampered with. That way, you can set a higher bar for hackers.

This is completely different to what this topic is about, I'm just saying that there is a case where it can be useful.

>>nicksl+(OP)
Better that it's a dummy device I can stick in a corner and turn on when needed, than the thing I need to carry around all day for various purposes like finding my way around and showing a legal public transport ticket