Tag Info

New answers tagged

2

There is a way to do this via Google's Native Client. However, executables have to be compiled for this environment explicitely. It is difficult to achieve otherwise (i.e. without a sandbox). DEP can't do this for you, as it only prevents memory segments without the executable flag from being executed. Just think of reading the CPUID, which is a simple ...


0

Hardware enforced DEP may be able to prevent, unsure about returning false values


0

You're smart to not trust black box security, but then that leaves software security. LUKS works, is well-regarded, and supports TRIM on SSD's. Yes, you have to enter your password when you boot the machine (when it boots your /boot, actually). Having your BIOS know your password is closer to the 'convenient' side of the spectrum than the 'secure' one. ...


2

Just to make things clear. Seems to me like there's two distinct questions here: "Do I have to trust my manufacturer?" and "Can a TPM be malicious?". Here's some comments about the second one: A TPM just can't do those kind of things, it's a passive/dumb device. It is typically connected via a standard bus (LPC) that doesn't have access to PCI device or ...



Top 50 recent answers are included