First time I see this Pluton thing. Found Comodo forums mod [posted[(https://forums.comodo.com/t/pluton-processor-new-mandatory-windows-requirement/358881/3) critical paragraphs from MS presentations:

Legacy TPMs are separate from CPUs, and hackers have also developed methods to steal the data and information that flows between a TPM and a CPU when they have physical access to a device. Just as it is not easy to hack an Xbox One to run pirated games, it is hoped that it will be much more difficult to physically hack a Windows PC in the future by integrating Pluton into the CPU.

Microsoft’s work with Intel, AMD and Qualcomm also means that Pluton will be updated from the cloud. Updates will be released monthly, on the same day as the Thueaday Patch dedicated to traditional Windows fixes. Integration into future processors.

…

Microsoft-authorized firmware provides the required secure features and functionality, and exposes the interfaces that operating system software and applications can use to interact with Pluton. The firmware is stored in flash storage available on the motherboard. When the system boots, the firmware is loaded as part of the Pluton Hardware initialization. When Windows starts, a copy of this firmware (or the latest firmware obtained from Windows Update, if available) is loaded into the operating system.

I feel dirty. From what I gathered they argue that everyone needs a black box integrated into their CPU that is updated by MS directly from their cloud on boot. It is needed because their dedicated TPM ex-darling may be breached by someone who have physical access to a hardware bus between CPU and TPM. Give em feet, they would go Tarantino all over them.

So on top of needing to buy new CPUs whenever this would be required, regular users trade unprobable attack surface of CPU<->TPM bus to Microsoft Update-on-Boot ™. I’m not as concerned about US based company (un)knowingly helping FBI/FSB/Mossad payload being installed to compromise almost everything (HELLO, EU, ARE YOU OKAY?), as I baffled by inpenetrateable counter-cognitant decision to ship Microsoft ™ updates directly to the core of the system. The company that is proud of vibe coding some 60% of their codebase, that can’t for the life of them write native apps they ship by default with their OS, would never, I say NEVER corrupt your encryption keys, rendering all you data unreacheable to you, but not to their 9000 partners.

Ten years from now, that would be a constant pain for everyone who is a techy in their friend circle.

Someone took some generous kickbacks for this.

Its problematic because now the only option is to vote for anti EU politics, which I hate. But I will.

required to run Win11 with Pluton enforcement

This explains why Microsoft doesn’t care about losing market share.

I wonder for how long will it be legal to have two phones, one for government-mandated identification and one with your actual personal data. Same for desktops, looks like.

desktops could start being required to run Win11 with Pluton enforcement to comply with this,

Not really enforceable, is it?

src

Wow, so growthfroth eventually reaches every platform. Nice…