Intel to include DRM in new Pentium 4 series processors
Pete Chown
1 at 234.cx
Fri, 13 Sep 2002 14:46:36 +0100
Brian Gladman wrote:
> This [TCPA secure boxes] seems to me to be an incredibly stupid thing to allow on a machine that
> any owner wants to continue to trust.
What happens if one of the boxes gets 0wned? For example, say I wrote
some software that needed to run in a secure box, but the software
itself was insecure. Subsequently someone finds this out and takes over
the boxes on different people's machines where my software was running.
At the moment, the more subtle break-ins are the most dangerous. If a
web site is defaced it can soon be put back. If a subtle change was
made to a company's accounting system, it may not be so simple.
We have various procedures to help identify when a break-in of the
second type has occurred. However, these become much more difficult
when the hardware protects the malicious code. Any of these boxes could
contain a time-bomb, and there would be no way for the IT department to
find out.
--
Pete