That was just a way to stop people from booting Linux. It didn’t work. Microsoft sucks.
All well and good for Enterprise folks I guess, but what about home users?
Good for the people sailing the seas too. Yarrr!
Rats. Leaving TPM off in the BIOS is how I’ve been avoiding it nagging me to upgrade from 10.
I’ve been curious about people who have been disabling the TPM. Where are you storing your disk encryption keys?
I’m not using disk encryption. It’s a desktop and if it’s every stolen I’ve got bigger problems.
Also, I presume that disk encryption makes it so you can’t just pop the drive in an adapter and pull stuff off it, which I sometimes need to do with old, retired drives.
This one big question around the T in TPM, has anyone found a satisfying answer yet?
T is for “trusted”. So far it was easy.
But who is supposed to trust whom?
The only case I found plausible so far is, that M$ can now decide whether or not they want to trust your PC (against you, the user).
Honestly, the user is the biggest security risk in the first place. People run all kinds of malware and put their passwords into phishing sites all the time. One thing a TPM is used for is secure boot, which prevents malware from inserting its own bootloader to take over the OS.
