TrenchBoot Progress For Adding More Security & Integrity To The Boot Process

[phoronix]

Phoronix: TrenchBoot Progress For Adding More Security & Integrity To The Boot Process

TrenchBoot has been in development for several years now by Oracle, 3mdeb, and other stakeholders for providing greater security and integrity to the Linux boot process via measured launch of the OS using a Dynamic Root of Trust Measurement (DRTM) backed by Intel Trusted Execution Technology (TXT) and AMD Secure Startup. Much progress was made over 2023 while more work is ahead in 2024 for furthering the TrenchBoot efforts...

https://www.phoronix.com/news/TrenchBoot-Status-2024

[Old Grouch]

Michael

Qubes OS on integrating the technology into its new "Anti-Evel Maid" (AEM) feature

I'm pretty certain that should be "Anti Evil Maid".

I see it has been updated to:

Qubes OS on integrating the technology into its new "Anti-Evil Maid" (AEM) feature

I would like to know what the problem is with an Anti-Evil Maid? Surely having a Maid that is Anti-Evil is a good thing?

Qubes very carefully describes the technology without hyphens (see link): https://www.qubes-os.org/doc/anti-evil-maid/

[JEBjames]

Michael

Typo "TrecnhBoot" should be "TrenchBoot"

[cj.wijtmans]

backed by intel and amd features? so its secure from anyone but the big agencies. 🤔

[hedonist]

backed by intel and amd features? so its secure from anyone but the big agencies. 🤔

why is it always the schizos on threads like these saying crap they have no idea about

[pWe00Iri3e7Z9lHOX2Qx]

backed by intel and amd features? so its secure from anyone but the big agencies. 🤔

I'm sure your cat pictures are safe from the NSA and FSB.

[Condoriano1997]

why is it always the schizos on threads like these saying crap they have no idea about

Absolutely, these folks really think national security agencies have ANY power over companies like AMD and Intel?
Of course all root private keys are really locked away and would never be accessed by three letter agencies.
Any firmware or hardware vulnerabilities are purely accidental, and never exploited by said agencies. That would be like, unethical.

I mean, what would lead anyone to believe unauditable security features, baked-in hardware at a silicon level, developed by US tech giants, would have ANY way of being compromised by our government? Fucking schizos, that is who.

[timofonic]

I'm sure your cat pictures are safe from the NSA and FSB.

But not his furry contents and My Little Pony...

Bin Laden was an otaku, remember that

[M@GOid]

Yeah yeah, it is all a joke and "I have nothing to hide", until you are drag out from some place because you made a inappropriate joke, like that bloke in Europe that got a pair of fighter jets intercept the airliner he was in, and get charged for the cost of the whole thing, because some stupid spook in a 3 letter agency couldn't differentiate the difference between a joke and a threat.

[cj.wijtmans]

why is it always the schizos on threads like these saying crap they have no idea about

you tell me buddy.