I have to agree with most of your points. I also wanted to add that, from what I've read so far, this will be a completely optional component. The user can enable/disable this "feature" at will (much like the PIII processor serial number). I believe the user can choose the what signing authorities to trust, and I also believe that Microsoft has no interest in being one themselves. If you're not running Microsoft Windows, obviously, you would probably just turn the feature off and never think about it again.

I don't think Intel or anyone else would include the chip if it couldn't be turned off. As was stated, Intel doesn't care what runs on its hardware. And Microsoft, while too big for my taste, isn't _that_ big. They are not in a position to dictate what everyone else does. Even if the big players included this chip, some motherboard maker somewhere would see the golden opportunity to offer non-compliant boards.

Besides that, I don't think the general public trusts Microsoft; if they tried to go too far too quickly, they would fail.

I've seen this same panic over Passport/Hailstorm, .Net, and who knows what else... While I don't think it is a good idea, I also believe that Microsoft can only hurt themselves if they go too far with this, and as such I am not worried.

- Jm4n


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/96/15716#15716