Among the things listed that a TPM chip can do I found something not like the others:
- Remote Attestation: ... This allows a third party to verify that the software has not been changed.
But in a certain way we know that's not a feasible thing and but TPM claims it. If I wanted to tear away remote attestation normally I would patch programs in RAM so they're in a different state than they could normally be in, but the explanation given for how is "Creates a nearly unforgeable hash key summary of the hardware and software configuration. The software in charge of hashing the configuration data determines the extent of the summary."; but fundamentally if you can read bits you can clone them.
So the question; what's the feasiblity of making a chip that when asked for these things answers "it's this" where this is something put in at configuration time with no regard to what the chip should be doing?