New answers tagged hardware
There is a way to do this via Google's Native Client. However, executables have to be compiled for this environment explicitely. It is difficult to achieve otherwise (i.e. without a sandbox). DEP can't do this for you, as it only prevents memory segments without the executable flag from being executed. Just think of reading the CPUID, which is a simple ...
Hardware enforced DEP may be able to prevent, unsure about returning false values
You're smart to not trust black box security, but then that leaves software security. LUKS works, is well-regarded, and supports TRIM on SSD's. Yes, you have to enter your password when you boot the machine (when it boots your /boot, actually). Having your BIOS know your password is closer to the 'convenient' side of the spectrum than the 'secure' one. ...
Just to make things clear. Seems to me like there's two distinct questions here: "Do I have to trust my manufacturer?" and "Can a TPM be malicious?". Here's some comments about the second one: A TPM just can't do those kind of things, it's a passive/dumb device. It is typically connected via a standard bus (LPC) that doesn't have access to PCI device or ...
Top 50 recent answers are included