srjek · HackerTrans

hace 20 horasdiscuss

Article was published close to the game's Steam release, and there was a 10% discount on launch. https://steamdb.info/app/4630570/. It's 20 USD now, and I assume the remaining difference is simply due to specifics around setting prices on steam and currency conversion.

srjek

hace 4 mesesdiscuss

It is correct, the measurement command to the TPM is not encrypted. So with MITM you can record the boot measurements, then reset and replay to any step of the boot process. Secrets locked to particular stages of boot are then exposed.

There is guidance on "Active" attacks [1], which is to set up your TPM secrets so they additionally require a signature from a secret stored securely on the CPU. But that only addresses secret storage, and does nothing about the compromised measurements. I also don't know what would be capable of providing the CPU secret for x86 processors besides... an embedded/firmware TPM.

[1] https://trustedcomputinggroup.org/wp-content/uploads/TCG_-CP...

srjek

hace 6 mesesdiscuss

Or they are just simply not on the happy path. For example, my laptop has been running KDE just fine for years, but my attempts to switch to Linux on my desktop today have turned into a project, as plasma, steam[1], discord, and sometimes kde_powerdevil[2] are crashing every time my monitors turn off.

[1] Might be https://gitlab.gnome.org/GNOME/gtk/-/issues/5984

[2] https://github.com/rockowitz/ddcutil/issues/556

srjek

hace 8 mesesdiscuss

Steam Frame is running SteamOS on ARM, and is capable of playing games standalone, which implies ARM support in Steam. Through granted, it could be in a limited form.

srjek

hace 8 mesesdiscuss

So, in the specs for the mini-pc, it claims the video out can do 4K @ 120Hz (even faster if displayport). I assume the 4K @ 60Hz you saw is from the "4K gaming at 60 FPS with FSR" line.

I reckon it can probably stream at 4K@120 if it can game at half that.

srjek

hace 8 mesesdiscuss

> I wish Linux would offer a solution to that. No idea what it would look like though.

It probably would have to be an isolated environment to run in. Something like the Secure VM efforts adopted for desktops, perhaps with a small trusted hypervisor instead of CPU vendor extensions. Anything else I can think of starts to restrain what software you can run on your machine, or becomes highly invasive in ways similar to Anti-Cheats on Windows, both of which would be rejected by the general Linux community. (Through, it's not like anyone was asking Microsoft either before implementing anti-cheat and trampling on system integrity, at least until Microsoft started requiring signed drivers)

However, given that a generic blackbox implementation enables DRM and binary encryption there will probably still be opposition. It gets particularly nasty if it's given access to something like a full TPM to unlock application data in the same way a TPM can unlock an encrypted drive for your OS. That would make it the penultimate closed source application, which is really anti-ethical to a number of communities. (open source, modding, game/app preservation...)

srjek

hace 9 mesesdiscuss

It's my understanding that nowadays most heat pumps have a defrost cycle where they automatically run in reverse for a bit with some or all fans off

comments