Re: CSI 2008 Redux

[Alexander Sotirov <alex () sotirov net>]

On Sat, Nov 22, 2008 at 08:03:28AM -0500, Dave Aitel wrote:
> And I don't understand why you need a trusted computing chip if you decide
> to trust your hypervisor in the first place. Trusting the hypervisor instead
> of a public key on a chip from Dell makes a lot more sense. It's more
> configurable in a user-friendly way, and less configurable in a RIAA/Big
> Brother friendly way.

Because with a TPM chip you can verify (remotely) that the hypervisor that
booted on the machine is really the one you trust, and not a malicious or
backdoored one.

Alex

Attachment: _bin
Description:

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave