by cheryl » Sun Oct 08, 2006 8:34 pm
Here's what a blogger on Slashdot had to say about Vista and DRM (digital rights management): (oh, and for the younger crowd, digital rights management is all about strict control of DVD and CD end user rights by the RIAA)
But does Windows Vista come with DRM of any sort?
For a fully functional system, the hardware specification requires that you must have a special new DRM-enforcing monitor, you must have a new DRM-enforcing video care, you must have a DRM-enforcing sound card, and that your motherboard must have a DRM-enforcment Trusted Platform Module (TPM).
The TPM is a boobytrapped selfdestructing microchip that contains the system's master cryptographic keys and lock. If the chip detects any attempt to get at your own master keys, the chip destroys them and effectively destroys all of your "secured" files on your computer.
This chip can be used to encrypt your files such that it is impossible for you to read or modify your files, except with strict approval of the chip and under the strict control of the chip and with only by using the approved and unmodifed software that was assigned to that file. This is called the Sealed Storage system.
The chip also contains a record of the exact hardware you have, and including a security rating andf other details about how the hardware is secured against any attempt you might make to "attack" your own computer and attempt to gain full control over your own computer. This is called the Platform Credentials.
The chip also spys on exactly what software you run. It logs your exact BIOS code, then it logs your exact bootloader software, and then it logs your exact operating system, and then it can log the various programs you have run since bootup. This is called the Integrity Measurments. They define the current state, or "health", of your machine.
The chip can also be used to send this hardware and software spy report to other people over the internet. You are denied any ability to control or alter the contents of this spy report. This is called Remote Attestation.
So... ahhhh.... I think the answer to your original question would kinda be a "yes".
If you're further interested in these issues, the Trusted Computing Group has the technical specifications for the TMP chip freely available on their website. The Microsoft Website and the Trusted Computing Group website and many other websites all offer explanations and documentation on Sealed Storage and on Platform Credentials and on Integrity Measurments and on Remote Attestation.
fangirl of nerds
Corn chips are no place for a mighty warrior.