Trusted Computing is presented by the Trusted Computing Group as a security tecnology. But it is a intrusive tecnology based on cryptographic data encryption whose private key is controlled by someone else than the legitimate system owner. So the owner do not have the full control of his system.

In addition, Trusted Computing uses Remote Attestation mechanism by which others can remotely knows our system status depending on the software is running, in order to allow us connecting them.

So, this kind of tecnology may be very dangerous for user privacy and freedom. It could be used to make a remote censorship of digital contents and to seal customer affiliation against the producers (using the sealed storage functionality), and so a total control. But who will be the controller?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11410/34048#34048