The much maligned “Trusted Computing” idea requires that the party you are supposed to trust deserves to be trusted, and Google is DEFINITELY NOT worthy of being trusted, this is a naked power grab to destroy the open web for Google’s ad profits no matter the consequences, this would put heavy surveillance in Google’s hands, this would eliminate ad-blocking, this would break any and all accessibility features, this would obliterate any competing platform, this is very much opposed to what the web is.

  • jarfil@beehaw.org
    link
    fedilink
    English
    arrow-up
    94
    ·
    1 year ago

    THIS IS NOT (just) ABOUT GOOGLE

    Currently, attestation and “trusted computing” are already a thing, the main “sources of trust” are:

    • Microsoft
    • Apple
    • Smartphone manufacturers
    • Google
    • Third party attestators

    This is already going on, you need a Microsoft signed stub to boot anything other than Windows on a PC, you need Apple’s blessing to boot anything on a Mac, your smartphone manufacturer decides whether you can unlock it and lose attestation, all of Microsoft, Apple and Google run app attestation through their app stores, several governments and companies run attestation software on their company hardware, and so on.

    This is the next logical step, to add “web app” attestation, since the previous ones had barely any pushback, and even fanboys of walled gardens cheering them up.

    PS: Somewhat ironically, Google’s Play Store attestation is one of the weaker ones, just look at Apple’s and the list of stuff they collect from the user’s device to “attest” it for any app.

    • Ech@lemm.ee
      link
      fedilink
      English
      arrow-up
      11
      ·
      1 year ago

      you need a Microsoft signed stub to boot anything other than Windows on a PC

      Can you expand on this? Maybe I’m just misunderstanding you, but a “pc” is not a Windows made machine. It is a collection of disparate computer parts made by different companies with no requirement to run Windows as the exclusive OS once put together.

      Even on a Windows OS, I can run any program I want (that’s made to operate with Windows). I may get a warning if it’s not a “known” developer, but I can still run it. Did I miss a big update to how 11 works with unknown software or something?

      • jarfil@beehaw.org
        link
        fedilink
        English
        arrow-up
        15
        ·
        edit-2
        1 year ago

        PCs have been switching to UEFI instead of legacy BIOS startups, one of the features of UEFI is Secure Boot, which ensures all code being run during the boot process is signed with a valid key, which most PC manufacturers have been choosing to be a Microsoft key by default because Windows requires Secure Boot and most PC users want to run Windows. Depending on the manufacturer, you may be able to switch to “legacy BIOS” boot, add your own keys, disable the check, or use a Microsoft signed stub for your alternative OS. Only the last one is guaranteed to work, though.

        Even on a Windows OS, I can run any program I want

        Windows 10/11 Home in S mode only allows running programs from the Microsoft Store, you need to upgrade the license if you want to “sideload” stuff.

    • zzz@feddit.de
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 year ago

      While I agree in general, and the overall sentiment/direction here to steer towards (morally) is clear… let’s stick to facts only.

      you need Apple’s blessing to boot anything on a Mac

      Bootloader is unlocked and alternative OS exist. Or what else did you mean by that?

      • jarfil@beehaw.org
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        Macs with the T2 could be configured to unlock the bootloader, but from my understanding, the new Apple Silicon Macs (M1, M2) come with the bootloader locked.

        • zzz@feddit.de
          link
          fedilink
          English
          arrow-up
          5
          ·
          edit-2
          1 year ago

          Your understanding is incorrect, I think.

          Apple specifically chose to leave it (or some part of the chain, I don’t actually know, not an expert lol) open, otherwise, a project like Asahi Linux would not have had a chance from the getgo.

          I might try to read up on it when I find the time whether they still have to rely on something signed by Apple before being able to take over in the boot process.

          • jarfil@beehaw.org
            link
            fedilink
            English
            arrow-up
            3
            ·
            edit-2
            1 year ago

            I see.

            I was going on the fact that the T2 has a “No Security” option for its Secure Boot config, while according to Apple Support the Apple Silicon ones (I don’t have one) only offer “Full” or “Reduced” security, which would still require signing: Change security settings on the startup disk of a Mac with Apple silicon

            Dunno how the Asahi folks are planning on doing it, but they do indeed say there is no bootlock 🤔

            Update: according to the Asahi docs, I seem to understand that Apple Silicon devices allow creating some sort of “OS containers” that can be chosen to boot from separately from the Mac OS one, and in such a custom container the security can be set to “permissive” limited to that container: https://github.com/AsahiLinux/docs/wiki/Open-OS-Ecosystem-on-Apple-Silicon-Macs Interesting.

            • zzz@feddit.de
              link
              fedilink
              English
              arrow-up
              3
              ·
              edit-2
              1 year ago

              Interesting.

              Yep, that’s a fitting term. You definitely still have to rely on macOS (and keep a copy of it around, e.g. for firmware upgrades, which of course basically only come bundled with macOS versions), but other than that, you can do more or less what you want to – as long as you’re outside of it.

              I quite like this idea though if I’m being honest, normie users get all the hardened security from the regular boot chain without experiencing basically any difference/downsides, while hardware enthusiasts and (Linux) tinkerers still have options open (well, options that you can get if you have a new chip on a rarer architecture with previously no third party OS).