04.03.09

Gemini version available ♊︎

Linux is Getting ‘Built-in’ Tivoization Equivalent

Posted in GNU/Linux, IBM, Kernel, Tivoization, Videos at 5:44 am by Dr. Roy Schestowitz

Could this have played a role in Linus’ decision regarding GPLv3?

Richard Stallman and the GPLv3
GPLv3 launch

Summary: TPM in Linux raises important questions about Freedom

A COUPLE of years ago Linus Torvalds wrote “I think Tivoization is *good*,” which led to lengthy discussions.

Yesterday in the IRC channel a fascinating tidbit resurfaced as IBM’s Trusted Computing ambitions for Linux reared their ugly head again. The idea of embedding ‘trusted’ computing in Linux (it is the very opposite of trust) probably involved work from IBM, at least based on some prior reports and the Linux Weather Forecast, which has the following for Linux 2.6.30.

Support for integrity management in the kernel has been merged. This code makes use of the trusted platform module (TPM) built into many systems to ensure that the system’s files (including its executable software) have not been corrupted, maliciously or otherwise.

This can be misused to achieve the very opposite, where “corrupted” means benignly hacked. An older article about this seems innocent enough, but questions may arise, such as: could Linus have known something about TPM when rejecting GPLv3?

“What would this mean to Linux as a Free underlying platform?”“It was one of the main reasons for the rejection in the Linux kernel mailing list,” writes oiaohm. If binaries are changed (or their ‘integrity’ not authenticated), then programs won’t run.

“Problem is, there are devices where TiVo style security is needed,” claims oiaohm, “Like you don’t want people tampering with electronic voting systems.

“As I said, there is good and bad to it. Good for very particular uses. You really do want to be able to inspect the source code of a electronic voting machine to make sure it is not stuffed up. You also don’t want people tampering with it. If you look around, you can find other valid uses of the tech.”

What would this mean to Linux as a Free underlying platform? The GNU/Linux operating system could suffer from this. “Problem is, I would bet almost all the money I have that it will be abused to harm users,” concludes oiaohm.

Video on Trusted Computing:

Ogg Theora

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

8 Comments

  1. NotZed said,

    April 3, 2009 at 7:53 am

    Gravatar

    Personality cults are a big problem in the “open sauce” world – what Linus says many people agree with, with no objective reasoning and an almost religious blindness (there are other examples of this fanboyism, although thankfully I think nobody listens to ESR any more). He has his own agenda, but without an underlying ideology it has no decipherable direction behind it; hence, this isn’t something RMS suffers from – he can be held accountable to the standards he sets himself. These other `leading’ individuals set no standards they are expected to abide by.

    The refusal to go to GPL3 is the biggest threat to the future of Linux, but on the other hand it is a fairly insignificant threat to the GNU platform as a whole. I think the kernel developers who keep pushing against it don’t realise what a relatively insignificant (however important) component of an entire operating system their hardware abstraction layer is.

    Of course, all of the ‘proprietary’ GNU/Linux vendors love this ‘validation’ software. They’d hate for any of their users to exercise their legal rights to freely modify the software they own even running on their own property. After all, how could they provide the service of support — what these customers have paid for — if they modified it, especially considering these vendors basically paid nothing in the first place (on average) for the software they *sold* to these customers.

    David Gerard Reply:

    Uh. It’s so insignificant that I’m using Linux instead of FreeBSD right now precisely because I want my damn hardware to work. The kernel is an amazing thing, it really is. Don’t underestimate it because Linus has annoyed you.

    Roy Schestowitz Reply:

    He didn’t annoy me. I even exchanged mail with him.

    The post criticises IBM mostly.

  2. Peter said,

    April 3, 2009 at 8:46 am

    Gravatar

    “Problem is, there are devices where TiVo style security is needed,” claims oiaohm, “Like you don’t want people tampering with electronic voting systems.

    You don’t need to Tivo-ize an e-voting machine. A voter doesn’t walk into a booth and log-in as a root user. Tivo-ization exists to allow a computer user root access yet still prevent them from changing the software installed on the machine.

    Roy Schestowitz Reply:

    Yes, but it only says “TiVo style” or “TiVo equivalent”. It’s the basic idea that there will be restriction on modification of programs.

    oiaohm Reply:

    TiVo style as Roy says to prevent modification. So person transporting machine could not alter it lets say to run a different bit of voting software that was rigged.

    TiVo style can prevent you basically starting anything on the machine bar the intended software. So providing a means of anyone with the machine simply tampering. Normally the voter is not the risk. Its people with more time.

    TiVo-ization a voting machine is still a good move. Since by blocking alteration of software as root you also block anyone using flawed services to do the same.

    Using selinux and other mandatory access controls under linux you can take way root users power to alter the system. Root user on Linux is nothing more than a virtual construct that is optional. TiVo-ization is more than this.

    TPM alteration is basically one more step. TPM protects the boot up process preventing tampering to bypass there. So enabling normal secuirty systems in Linux to be turned into fully TiVo-ization systems with no simple by pass.

    Peter Reply:

    TiVo-ization a voting machine is still a good move.

    Generally, I agree with all you say. My disagreement comes with using the term “TiVo-ization” in such a context. The reason being that an e-voting machine is not consumer-owned and controlled. I think saying something like, “Using a TPM on voting machines is still a good move.” is more accurate. The point of the term “TiVo-ization” is to point out when trusted computing has become treacherous – since the TiVo is a consumer product.

    oiaohm Reply:

    I termed it that way mostly for the simple point the same tech is used to do both.

    You build a TiVo-ization device or a TPM protected voting machine you are using exactly the same tech no difference.

    This is the problem with techs they are double sided. Its making sure they are used for good not evil.

DecorWhat Else is New


  1. Links 1/12/2021: Tux Paint 0.9.27 and WordPress 5.9 Beta

    Links for the day



  2. [Meme] EPO Administrative Council Believing EPO-Bribed 'Media' (IAM Still Shilling and Lying for Cash)

    IAM continues to do what brings money from EPO management and Team UPC, never mind if it is being disputed by the patent examiners themselves



  3. The EPO's Mythical “Gap” Has Been Found and It's Bonuses for People Who Use Pure Fiction to Steal From Patent Examiners

    The phony president who has the audacity to claim there's a budget gap is issuing millions of euros for his enablers to enjoy; weeks ahead of the next meeting of national delegates the Central Staff Committee (CSC) tells them: "Events show that the delegations’ concerns about functional allowances have materialised. The lack of transparency and inflation of the budget envelope gives rise to the suspicion that high management is pursuing a policy of self-service at the expense of EPO staff, which is difficult to reconcile with the Office’s claimed cost-saving policy, and to the detriment of the whole Organisation."



  4. Video: Making the Internet a Better Place for People, Not Megacorporations

    Following that earlier list of suggested improvements for a freedom-respecting Internet, here's a video and outline



  5. Links 30/11/2021: KDE Plasma 5.23.4, 4MLinux 38.0, Long GitHub Downtime, and Microsoft's CEO Selling Away Shares

    Links for the day



  6. A Concise Manifesto For Freedom-Respecting Internet

    An informal list of considerations to make when reshaping the Internet to better serve people, not a few corporations that are mostly military contractors subsidised by the American taxpayers



  7. Freenode.net Becomes a 'Reddit Clone' and Freenode IRC is Back to Old Configurations After Flushing Down Decades' Worth of User/Channel Data and Locking/Shutting Out Longtime Users

    Freenode is having another go; after “chits” and “jobs” (among many other ideas) have clearly failed, and following the change of daemon (resulting in massive loss of data and even security issues associated with impersonation) as well as pointless rebrand as “Joseon”, the domain Freenode.net becomes something completely different and the IRC network reopens to all



  8. Jack Dorsey's Decision is a Wake-up Call: Social Control Media is Just a Toxic Bubble

    The state of the World Wide Web (reliability, preservation, accessibility, compatibility etc.) was worsened a lot more than a decade ago; with social control media that’s nowadays just a pile of JavaScript programs we’re basically seeing the Web gradually turning into another Adobe Flash (but this time they tell us it’s a “standard”), exacerbating an already-oversized ‘bubble economy’ where companies operate at a loss while claiming to be worth hundreds of billions (USD) and generally serve imperialistic objectives by means of manipulation like surveillance, selective curation, and censorship



  9. IRC Proceedings: Monday, November 29, 2021

    IRC logs for Monday, November 29, 2021



  10. Links 29/11/2021: NuTyX 21.10.5 and CrossOver 21.1.0

    Links for the day



  11. This Apt Has Super Dumbass Powers. Linus Sebastian and Pop_OS!

    Guest post by Ryan, reprinted with permission



  12. [Meme] Trying to Appease Provocateurs and Borderline Trolls

    GNU/Linux isn’t just a clone of Microsoft Windows and it oughtn’t be a clone of Microsoft Windows, either; some people set themselves up for failure, maybe by intention



  13. Centralised Git Hosting Has a Business Model Which is Hostile Towards Developers' Interests (in Microsoft's Case, It's an Attack on Reciprocal Licensing and Persistent Manipulation)

    Spying, censoring, and abusing projects/developers/users are among the perks Microsoft found in GitHub; the E.E.E.-styled takeover is being misused for perception manipulation and even racism, so projects really need to take control of their hosting (outsourcing is risky and very expensive in the long run)



  14. Links 29/11/2021: FWUPD's 'Best Known Configuration' and Glimpse at OpenZFS 3.0

    Links for the day



  15. President Biden Wants to Put Microsofter in Charge of the Patent Office, Soon to Penalise Patent Applicants Who Don't Use Microsoft's Proprietary Formats

    The tradition of GAFAM or GIAFAM inside the USPTO carries on (e.g. Kappos and Lee; Kappos lobbies for Microsoft and IBM, whereas Lee now works for Amazon/Bezos after a career at Google); it's hard to believe anymore that the USPTO exists to serve innovators rather than aggressive monopolists, shielding their territory by patent threats (lawsuits or worse aggression) and cross-licensing that's akin to a cartel



  16. Microsoft GitHub Exposé — Part VIII — Mr. Graveley's Long Career Serving Microsoft's Agenda (Before Hiring by Microsoft to Work on GitHub's GPL Violations Machine)

    Balabhadra (Alex) Graveley was promoting .NET (or Mono) since his young days; his current job at Microsoft is consistent with past harms to GNU/Linux, basically pushing undesirable (except to Microsoft) things to GNU/Linux users; Tomboy used to be the main reason for distro ISOs to include Mono



  17. Dr. Andy Farnell on Teaching Cybersecurity in an Age of 'Fake Security'

    By Dr. Andy Farnell



  18. IRC Proceedings: Sunday, November 28, 2021

    IRC logs for Sunday, November 28, 2021



  19. Links 29/11/2021: Linux 5.16 RC3 and Lots of Patent Catch-up

    Links for the day



  20. By 2022 0% of 'News' Coverage About Patents Will Be Actual Journalism (Patent Litigation Sector Has Hijacked the World Wide Web to Disseminate Self-Promotional Misinformation)

    Finding news about the EPO is almost impossible because today’s so-called ‘news’ sites are in the pockets of Benoît Battistelli, António Campinos, and their cohorts who turned the EPO into a hub of litigation, not science; this is part of an international (worldwide) problem because financial resources for journalism have run out, and so the vacuum is filled/replaced almost entirely by Public Relations (PR) and marketing



  21. Trying to Appease Those Who Never Liked Free Software or Those Who Blindly Loved All Patent Monopolies to Begin With

    It’s crystal clear that trying to appease everyone, all the time, is impossible; in the case of the EPO, for example, we hope that exposing Team Battistelli/Campinos helps raise awareness of the harms of patent maximalism, and when speaking about Free software — whilst occasionally bashing the alternatives (proprietary) — we hope to convince more people to join the “Good Fight”



  22. Links 28/11/2021: Laravel 8.73 Released, GitHub Offline for Hours

    Links for the day



  23. IRC Proceedings: Saturday, November 27, 2021

    IRC logs for Saturday, November 27, 2021



  24. Links 27/11/2021: Nvidia’s DLSS Hype and Why GNU/Linux Matters

    Links for the day



  25. [Meme] Linus Gabriel Sebastian Takes GNU/Linux for a (Tail)'Spin'

    If you’re trying to prove that GNU/Linux is NOT Windows, then “haha! Well done…”



  26. GNU/Linux is for Freedom and It'll Gain Many Users When (or Where) People Understand What Software (or Computing) Freedom Means

    Software that respects people's freedom (and by extension privacy as well) is an alluring proposition; those who choose to try GNU/Linux for the wrong reasons are likely the wrong target audience for advocates



  27. Amid Reports of Microsoft's Competition Crimes in Europe...

    European companies are complaining, but they seem to overlook the principal aspect of an imperialistic system with bottomless pockets (almost 30 trillion dollars in debt already; US national debt soared again last month); Microsoft is shielded by a political system with military (“defence”) as bailout budget to help cushion international expansion for data grab and technical leverage, as we've seen in the case of EPO (this is all political, not technical, and should thus be treated as a political/corruption issue)



  28. Is Linus Trolling the GNU/Linux Community?

    This new video responds to what many sites have been provoked into amplifying



  29. Links 27/11/2021: Tux Paint 0.9.27 and SeaMonkey 1.1.19 in EasyOS

    Links for the day



  30. [Meme] Keeping Our Distance From Microsoft

    The OSI is the dagger, the Linux Foundation is the knife, and many others are the sword by which Microsoft tries to get into the very heart of GNU/Linux and extinguish the Free software movement


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts