joncallas's community profile

1 to 1 of 1

My comments

We definitely believe in TPMs!
Stephen,

Thanks for the comment. We're firm believers in TPMs we have
even done the extra work to support many of the older TPMs
that are present in previous-generation corporate computers.

You're absolutely right that a TPM-based authentication system
could have helped TJX. But also remember that at the time that
they were hacked, this wouldn't have been possible for them.
Also, they would have had to implement it correctly, and the
hack occurred because of incorrect implementation.

The TJX story is a lesson to us all because it was a targeted,
criminal attack on the financial system using the weaknesses in
a retailer's network. It shows that we all have to be vigilant as a
community and police ourselves better because a flaw in one
place can cause problems for many, many people.

That means security everywhere. TPMs are an important part of
security everywhere, but like any single subsystem, they are only
part of the total solution.

Regards,
Jon Callas
CTO/CSO PGP Corporation
February 2, 2008

0 replies

More information: Newsletters; CNET Mobile; Customer Help Center; RSS; CNET Widgets; About CNET