<?xml version="1.0" encoding="iso-8859-1"?>

<rdf:RDF
   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
   xmlns:dc="http://purl.org/dc/elements/1.1/"
   xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
   xmlns:admin="http://webns.net/mvcb/"
   xmlns:cc="http://web.resource.org/cc/"
   xmlns="http://purl.org/rss/1.0/">

<channel rdf:about="http://cfp2004.org/blogs/trustedcomp/">
<title>Trusted Computing</title>
<link>http://cfp2004.org/blogs/trustedcomp/</link>
<description></description>
<dc:language>en-us</dc:language>
<dc:creator></dc:creator>
<dc:date>2004-04-22T09:55:09-08:00</dc:date>
<admin:generatorAgent  
rdf:resource="http://www.movabletype.org/?v=2.661" />
<cc:license rdf:resource="http://creativecommons.org/licenses/by-nd-nc/1.0/" />


<items>
<rdf:Seq><rdf:li rdf:resource="
http://cfp2004.org/blogs/trustedcomp/archives/000047.html" />
<rdf:li rdf:resource="
http://cfp2004.org/blogs/trustedcomp/archives/000045.html" />
</rdf:Seq>
</items>

</channel>

<item rdf:about="
http://cfp2004.org/blogs/trustedcomp/archives/000047.html">
<title>Unlimited Freedom</title>
<link>
http://cfp2004.org/blogs/trustedcomp/archives/000047.html</link>
<description><![CDATA[<p>Seth has mentioned the arguments of an "anonymous fourth panelist" known as "Unlimited Freedom" several times now. In case you haven't seen it, the blog post he is referring to is <a href="http://invisiblog.com/1c801df4aee49232/article/0df117d5d9b32aea8bc23194ecc270ec">here</a>. I highly recommend it (as has Seth) as a well reasoned argument for a variety of "beneficial" uses of Trusted Computing's secure attestation feature.</p>

<p>Seth's own paper "Trusted Computing: Promise and Risk" is <a href="http://www.eff.org/Infra/trusted_computing/20031001_tc.php">here</a>. </p>

<p>If you are interested in this debate, you should definitely read both.</p>]]></description>
<dc:subject></dc:subject>
<dc:creator>msteffen</dc:creator>
<dc:date>2004-04-22T09:55:09-08:00</dc:date>
</item>
<item rdf:about="
http://cfp2004.org/blogs/trustedcomp/archives/000045.html">
<title>Running Notes</title>
<link>
http://cfp2004.org/blogs/trustedcomp/archives/000045.html</link>
<description><![CDATA[<p><b>David Safford: Why Trusted Computing?</b></p>

<p>* Hackers have tried attacking servers, the networks, but now they realize that the client is the best target because users are the weakest link.<br />
* Threat model: remote software attacks and physical theft<br />
* Not interested in DRM<br />
* I want to be able to trust my machine.</p>

<p>- What does TPM do?<br />
* Private Keys generated and remain on processor<br />
* Hash of applications to prevent hacks, backdoors<br />
* Attestation - software manufacturers can validate copy on your drive</p>

<p>- Taking Control of TPM<br />
* BIOS can turn TPM on or off<br />
* If off, software cannot turn it back on<br />
* IBM currently ships with TPM turned off at BIOS<br />
* User must "take ownership" of TPM to create new Storage Root Key and owner secret.</p>

<p><b>Seth Schoen: How to abuse trusted computing</b></p>

<p>When Seth went to math camp, people used to play "core wars" where computer programs would fight each other and trying to destroy each other by tricking it into executing an illegal instruction.</p>

<p>Recently, he used Windows XP and noticed this behavior -- programs fighting each other for control and to neutralize other programs.</p>

<p>* Trusted computer will change the balance of power in these modern core wars.<br />
* TC is arbitrary.<br />
* Software is being upgraded all the time.<br />
* Who decides what is a good or bad program?<br />
* We can all agree that viruses are bad but there is a lot of grey</p>

<p>* Users want to protect themselves = good<br />
* Attestation allows others to control what changes you can make to your computer = bad; i.e. you are considered a potential attacker.<br />
* Software developers can use TC to prevent reverse engineering, which diminishes innovation and competition.</p>]]></description>
<dc:subject></dc:subject>
<dc:creator>jasonschultz</dc:creator>
<dc:date>2004-04-22T09:31:45-08:00</dc:date>
</item>


</rdf:RDF>

