EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

04.03.09

Linux is Getting ‘Built-in’ Tivoization Equivalent

Posted in GNU/Linux, IBM, Kernel, Tivoization, Videos at 5:44 am by Dr. Roy Schestowitz

Could this have played a role in Linus’ decision regarding GPLv3?

Richard Stallman and the GPLv3
GPLv3 launch

Summary: TPM in Linux raises important questions about Freedom

A COUPLE of years ago Linus Torvalds wrote “I think Tivoization is *good*,” which led to lengthy discussions.

Yesterday in the IRC channel a fascinating tidbit resurfaced as IBM’s Trusted Computing ambitions for Linux reared their ugly head again. The idea of embedding ‘trusted’ computing in Linux (it is the very opposite of trust) probably involved work from IBM, at least based on some prior reports and the Linux Weather Forecast, which has the following for Linux 2.6.30.

Support for integrity management in the kernel has been merged. This code makes use of the trusted platform module (TPM) built into many systems to ensure that the system’s files (including its executable software) have not been corrupted, maliciously or otherwise.

This can be misused to achieve the very opposite, where “corrupted” means benignly hacked. An older article about this seems innocent enough, but questions may arise, such as: could Linus have known something about TPM when rejecting GPLv3?

“What would this mean to Linux as a Free underlying platform?”“It was one of the main reasons for the rejection in the Linux kernel mailing list,” writes oiaohm. If binaries are changed (or their ‘integrity’ not authenticated), then programs won’t run.

“Problem is, there are devices where TiVo style security is needed,” claims oiaohm, “Like you don’t want people tampering with electronic voting systems.

“As I said, there is good and bad to it. Good for very particular uses. You really do want to be able to inspect the source code of a electronic voting machine to make sure it is not stuffed up. You also don’t want people tampering with it. If you look around, you can find other valid uses of the tech.”

What would this mean to Linux as a Free underlying platform? The GNU/Linux operating system could suffer from this. “Problem is, I would bet almost all the money I have that it will be abused to harm users,” concludes oiaohm.

Video on Trusted Computing:

Ogg Theora

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

8 Comments

  1. NotZed said,

    April 3, 2009 at 7:53 am

    Gravatar

    Personality cults are a big problem in the “open sauce” world – what Linus says many people agree with, with no objective reasoning and an almost religious blindness (there are other examples of this fanboyism, although thankfully I think nobody listens to ESR any more). He has his own agenda, but without an underlying ideology it has no decipherable direction behind it; hence, this isn’t something RMS suffers from – he can be held accountable to the standards he sets himself. These other `leading’ individuals set no standards they are expected to abide by.

    The refusal to go to GPL3 is the biggest threat to the future of Linux, but on the other hand it is a fairly insignificant threat to the GNU platform as a whole. I think the kernel developers who keep pushing against it don’t realise what a relatively insignificant (however important) component of an entire operating system their hardware abstraction layer is.

    Of course, all of the ‘proprietary’ GNU/Linux vendors love this ‘validation’ software. They’d hate for any of their users to exercise their legal rights to freely modify the software they own even running on their own property. After all, how could they provide the service of support — what these customers have paid for — if they modified it, especially considering these vendors basically paid nothing in the first place (on average) for the software they *sold* to these customers.

    David Gerard Reply:

    Uh. It’s so insignificant that I’m using Linux instead of FreeBSD right now precisely because I want my damn hardware to work. The kernel is an amazing thing, it really is. Don’t underestimate it because Linus has annoyed you.

    Roy Schestowitz Reply:

    He didn’t annoy me. I even exchanged mail with him.

    The post criticises IBM mostly.

  2. Peter said,

    April 3, 2009 at 8:46 am

    Gravatar

    “Problem is, there are devices where TiVo style security is needed,” claims oiaohm, “Like you don’t want people tampering with electronic voting systems.

    You don’t need to Tivo-ize an e-voting machine. A voter doesn’t walk into a booth and log-in as a root user. Tivo-ization exists to allow a computer user root access yet still prevent them from changing the software installed on the machine.

    Roy Schestowitz Reply:

    Yes, but it only says “TiVo style” or “TiVo equivalent”. It’s the basic idea that there will be restriction on modification of programs.

    oiaohm Reply:

    TiVo style as Roy says to prevent modification. So person transporting machine could not alter it lets say to run a different bit of voting software that was rigged.

    TiVo style can prevent you basically starting anything on the machine bar the intended software. So providing a means of anyone with the machine simply tampering. Normally the voter is not the risk. Its people with more time.

    TiVo-ization a voting machine is still a good move. Since by blocking alteration of software as root you also block anyone using flawed services to do the same.

    Using selinux and other mandatory access controls under linux you can take way root users power to alter the system. Root user on Linux is nothing more than a virtual construct that is optional. TiVo-ization is more than this.

    TPM alteration is basically one more step. TPM protects the boot up process preventing tampering to bypass there. So enabling normal secuirty systems in Linux to be turned into fully TiVo-ization systems with no simple by pass.

    Peter Reply:

    TiVo-ization a voting machine is still a good move.

    Generally, I agree with all you say. My disagreement comes with using the term “TiVo-ization” in such a context. The reason being that an e-voting machine is not consumer-owned and controlled. I think saying something like, “Using a TPM on voting machines is still a good move.” is more accurate. The point of the term “TiVo-ization” is to point out when trusted computing has become treacherous – since the TiVo is a consumer product.

    oiaohm Reply:

    I termed it that way mostly for the simple point the same tech is used to do both.

    You build a TiVo-ization device or a TPM protected voting machine you are using exactly the same tech no difference.

    This is the problem with techs they are double sided. Its making sure they are used for good not evil.

What Else is New


  1. Weaponising Russophobia Against One's Critics

    Response to smears and various whispering campaigns whose sole purpose is to deplete the support base for particular causes and people; these sorts of things have gotten out of control in recent years



  2. When the EPO is Run by Politicians It's Expected to Be Aggressive and Corrupt Like Purely Political Establishments

    António 'Photo Op' Campinos will have marked his one-year anniversary in July; he has failed to demonstrate morality, respect for the law, understanding of the sciences, leadership by example and even the most basic honesty (he lies a lot)



  3. Links 16/6/2019: Tmax OS and New Features for KDE.org

    Links for the day



  4. Stuffed/Stacked Panels Sent Back Packing After One-Sided Patent Hearings That Will Convince Nobody, Just Preach to the Choir

    Almost a week ago the 'world tour' of patent lobbyists in US Senate finally ended; it was an utterly ridiculous case study in panel stacking and bribery (attempts to buy laws)



  5. 2019 H1: American Software Patents Are as Worthless as They Were Last Year and Still Susceptible to Invalidation

    With a fortnight left before the second half of the year it seems evident that software patents aren't coming back; the courts have not changed their position at all



  6. As European Patent Office Management Covers up Collapse in Patent Quality Don't Expect UPC to Ever Kick Off

    It would be madness to allow EPO-granted patents to become 'unitary' (bypassing sovereignty of nations that actually still value patent quality); it seems clear that rogue EPO management has, in effect, not only doomed UPC ambitions but also European Patents (or their perceived legitimacy, presumption of validity)



  7. António Campinos -- Unlike His Father -- Engages in Imperialism (Using Invalid Patents)

    Despite some similarities to his father (not positive similarities), António Campinos is actively engaged in imperialistic agenda that defies even European law; the EPO not only illegally grants patents but also urges other patent offices to do the same



  8. António Campinos Takes EPO Waste and Corruption to Unprecedented Levels and Scale

    The “B” word (billions) is thrown around at Europe’s second-largest institution because a mischievous former EUIPO chief (not Archambeau) is ‘partying’ with about half of the EPO’s all-time savings, which are supposed to be reserved for pensions and other vital programmes, not presidential palaces and gambling



  9. Links 15/6/2019: Astra Linux in Russia, FreeBSD 11.3 RC

    Links for the day



  10. Code of Conduct Explained: Partial Transcript - August 10th, 2018 - Episode 80, The Truth About Southeast Linuxfest

    "Ask Noah" and the debate on how a 'Code of Conduct' is forcibly imposed on events



  11. Links 14/6/2019: Xfce-Related Releases, PHP 7.4.0 Alpha

    Links for the day



  12. The EPO is a Patent Troll's Wet Dream

    The makers of software and games in Europe will have to spend a lot of money just keeping patent trolls off their backs — a fact that seems to never bother EPO management because it profits from it



  13. EPO Spreading Patent Extremists' Ideology to the Whole World, Now to South Korea

    The EPO’s footprint around the world's patent systems is an exceptionally dangerous one; The EPO amplifies the most zealous voices of the patents and litigation ‘industry’ while totally ignoring the views and interests of the European public, rendering the EPO an ‘agent of corporate occupation’



  14. Guest Post: Notes on Free Speech, and a Line in the Sand

    We received this anonymous letter and have published it as a follow-up to "Reader's Claim That Rules Similar to the Code of Conduct (CoC) Were 'Imposed' on LibrePlanet and the FSF"



  15. Links 13/6/2019: CERN Dumps Microsoft, GIMP 2.10.12 Released

    Links for the day



  16. Links 12/6/2019: Mesa 19.1.0, KDE neon 5.16, Endless OS 3.6.0 and BackBox Linux 6

    Links for the day



  17. Leaked Financial 'Study' Document Shows EPO Management and Mercer Engaging in an Elaborate “Hoax”

    How the European Patent Office (EPO) lies to its own staff to harm that staff; thankfully, the staff isn't easily fooled and this whole affair will merely obliterate any remnants of "benefit of the doubt" the President thus far enjoyed



  18. Measuring Patent Quality and Employer Quality in Europe

    Comparing the once-famous and respected EPO to today's joke of an office, which grants loads of bogus patents on just about anything including fruit and mathematics



  19. Granting More Fundamentally Wrong Patents Will Mean Reduced Certainty, Not Increased Certainty

    Law firms that are accustomed to making money from low-quality and abstract patents try to overcome barriers by bribing politicians; this will backfire because they show sheer disregard for the patent system's integrity and merely lower the legal certainty associated with granted (by greedy offices) patents



  20. Links 11/6/2019: Wine 4.10, Plasma 5.16

    Links for the day



  21. Chapter 10: Moving Forward -- Getting the Best Results From Open Source With Your Monopoly

    “the gradual shift in public consciousness from their branding towards our own, is the next best thing to owning them outright.”



  22. Chapter 9: Ownership Through Branding -- Change the Names, and Change the World

    The goal for those fighting against Open source, against the true openness (let's call it the yet unexploited opportunities) of Open source, has to be first to figuratively own the Linux brand, then literally own or destroy the brand, then to move the public awareness of the Linux brand to something like Azure, or whatever IBM is going to do with Red Hat.



  23. Links 10/6/2019: VLC 3.0.7, KDE Future Plans

    Links for the day



  24. Patent Quality Continues to Slip in Europe and We Know Who Will Profit From That (and Distract From It)

    The corporate media and large companies don't speak about it (like Red Hat did before entering a relationship with IBM), but Europe is being littered and saturated with a lot of bogus software patents -- abstract patents that European courts would almost certainly throw out; this utter failure of the media to do journalism gets exploited by the "big litigation" lobby and EPO management that's granting loads of invalid European Patents (whose invalidation goes underreported or unreported in the media)



  25. Corporate Front Groups Like OIN and the Linux Foundation Need to Combat Software Patents If They Really Care About Linux

    The absurdity of having groups that claim to defend Linux but in practice defend software patents, if not actively then passively (by refusing to comment on this matter)



  26. Links 9/6/2019: Arrest of Microsoft Peter, Linux 5.2 RC4, Ubuntu Touch Update

    Links for the day



  27. Chapter 8: A Foot in the Door -- How to Train Sympathetic Developers and Infiltrate Other Projects

    How to train sympathetic developers and infiltrate other projects



  28. Chapter 7: Patent War -- Use Low-Quality Patents to Prove That All Software Rips Off Your Company

    Patents in the United States last for 20 years from the time of filing. Prior to 1994, the patent term was 17 years from when the patent was issued.



  29. The Linux Foundation in 2019: Over 100 Million Dollars in Income, But Cannot Maintain Linux.com?

    Today’s Linux Foundation gets about 0.1 billion dollars per year (as explained in our previous post), so why can’t it spend about 0.1% of that money on people who write for and maintain a site that actually promotes GNU/Linux?



  30. Microsoft and Proprietary Software Vendors a Financial Boon for the Linux Foundation, But at What Cost?

    The Linux Foundation is thriving financially, but the sources of income are diversified to the point where the Linux Foundation is actually funded by foes of Linux, defeating the very purpose or direction of such a nonprofit foundation (led by self-serving millionaires who don't use GNU/Linux)


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts