123
The GPU, not the TPM, is the root of hardware DRM
(mjg59.dreamwidth.org)
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
I replaced Raspberry Pis with Intel NUC mainly because NUC comes with TPM 2.0. I can now encrypt my drives without storing the key in plaintext.
I could not read the blog because it blocked me for using VPN (speaking of DRMs :) ). While I agree DRM is evil and should be ablolished from user's computers, readers should not get wrong idea about TPM. It's what protects your phone and servers from attackers. Desktop would also benefit from it a lot.
You can also do that without a TPM, you just have to remember a secure passphrase to unlock the drive encryption key.
FWIW for RPi https://www.crowdsupply.com/anavi-technology/anavi-tpm-2-0-for-raspberry-pi and more generally to store anything anywhere https://shop.nitrokey.com/shop/nitrokey-storage-2-56
Hard disagree here, TPM is only 1 more protection, it's not what alone does protect your data.
Also desktop vs phone and servers are very different use cases. You can easily get your phone stolen in a public space. Your server if it hosted in a data center you don't own might get compromised ... but your desktop, it means breaking in or inviting in guests you do not trust. The situations are very different. Encrypting disks on a small device holding sensitive data, e.g. banking, that can easily be taken from you in public makes sense for most people. Doing so on a heavy bulky device that sits in your locked house where is quite another thing.