GET https://kbin.spritesserver.nl/index.php/m/linux@lemmy.ml/t/24814/Is-anyone-here-using-their-hardware-TPM-chips-for-credentials

Response
200 OK
IP
216.73.216.88
Profiled on
Token
a414a9

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 2.69 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.04 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#274
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#268
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#270
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
  +title: "Is anyone here using their hardware TPM chips for credentials?"
  +url: null
  +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 29
  +favouriteCount: 95
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1710554448 {#2418
    date: 2024-03-16 03:00:48.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 24814
  -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
  -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1703620970
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/9969516"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703534570 {#1858
    date: 2023-12-25 21:02:50.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#274
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#268
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#270
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
  +title: "Is anyone here using their hardware TPM chips for credentials?"
  +url: null
  +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 29
  +favouriteCount: 95
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1710554448 {#2418
    date: 2024-03-16 03:00:48.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 24814
  -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
  -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1703620970
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/9969516"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703534570 {#1858
    date: 2023-12-25 21:02:50.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#274
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#268
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#270
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
  +title: "Is anyone here using their hardware TPM chips for credentials?"
  +url: null
  +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 29
  +favouriteCount: 95
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1710554448 {#2418
    date: 2024-03-16 03:00:48.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 24814
  -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
  -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1703620970
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/9969516"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703534570 {#1858
    date: 2023-12-25 21:02:50.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
6 DENIED moderate 
App\Entity\EntryComment {#4013
  +user: App\Entity\User {#3961 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "A security module or a key fob/smart card processes the key internally using its own dedicated ram and cpu without any debugging support. This way, even something will full ram and cpu access or a compromise of your machine, there is no way to export or access the key. Data is passed to the module and it returns the scrambled or unscrambled result based on the key which no body knows or has ever seen. A key locked with no way to access can’t be hacked without physically stealing the module, which is where your pin comes in to save you. The TPM is a very important part of a secure boot chain. If you want to secure other things I wouldn’t blame you for using a separate module or fob that isn’t always connected util it’s actually needed and it should only be activated with a physical button or something so you have to be present to engage with it. This adds even more security. So you could use the TPM for boot chain security and a separate fob or data privacy for example."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1703969451 {#4022
    date: 2023-12-30 21:50:51.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4011 …}
  +nested: Doctrine\ORM\PersistentCollection {#4009 …}
  +votes: Doctrine\ORM\PersistentCollection {#4007 …}
  +reports: Doctrine\ORM\PersistentCollection {#4005 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3973 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3977 …}
  -id: 271518
  -bodyTs: "'access':33,47,83 'activ':149 'actual':142 'add':167 'alway':137 'base':64 'blame':125 'bodi':70 'boot':113,178 'button':153 'card':8 'chain':114,179 'come':98 'compromis':36 'connect':138 'could':173 'cpu':19,32 'data':50,186 'debug':22 'dedic':16 'engag':163 'even':26,168 'ever':74 'exampl':189 'export':45 'fob':133,184 'fob/smart':7 'full':29 'hack':87 'import':108 'intern':12 'isn':135 'key':6,11,49,67,77 'know':71 'lock':78 'machin':39 'modul':3,55,92,131 'need':143 'part':109 'pass':52 'physic':89,152 'pin':97 'present':161 'privaci':187 'process':9 'ram':17,30 'result':63 'return':58 'save':101 'scrambl':60 'secur':2,112,119,170,180 'seen':75 'separ':130,183 'someth':27,155 'steal':90 'support':23 'thing':121 'tpm':104,176 'unscrambl':62 'use':13,128,174 'util':139 'want':117 'way':25,43,81 'without':20,88 'wouldn':123"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7726643"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703969451 {#3958
    date: 2023-12-30 21:50:51.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
7 DENIED edit 
App\Entity\EntryComment {#4013
  +user: App\Entity\User {#3961 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "A security module or a key fob/smart card processes the key internally using its own dedicated ram and cpu without any debugging support. This way, even something will full ram and cpu access or a compromise of your machine, there is no way to export or access the key. Data is passed to the module and it returns the scrambled or unscrambled result based on the key which no body knows or has ever seen. A key locked with no way to access can’t be hacked without physically stealing the module, which is where your pin comes in to save you. The TPM is a very important part of a secure boot chain. If you want to secure other things I wouldn’t blame you for using a separate module or fob that isn’t always connected util it’s actually needed and it should only be activated with a physical button or something so you have to be present to engage with it. This adds even more security. So you could use the TPM for boot chain security and a separate fob or data privacy for example."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1703969451 {#4022
    date: 2023-12-30 21:50:51.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4011 …}
  +nested: Doctrine\ORM\PersistentCollection {#4009 …}
  +votes: Doctrine\ORM\PersistentCollection {#4007 …}
  +reports: Doctrine\ORM\PersistentCollection {#4005 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3973 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3977 …}
  -id: 271518
  -bodyTs: "'access':33,47,83 'activ':149 'actual':142 'add':167 'alway':137 'base':64 'blame':125 'bodi':70 'boot':113,178 'button':153 'card':8 'chain':114,179 'come':98 'compromis':36 'connect':138 'could':173 'cpu':19,32 'data':50,186 'debug':22 'dedic':16 'engag':163 'even':26,168 'ever':74 'exampl':189 'export':45 'fob':133,184 'fob/smart':7 'full':29 'hack':87 'import':108 'intern':12 'isn':135 'key':6,11,49,67,77 'know':71 'lock':78 'machin':39 'modul':3,55,92,131 'need':143 'part':109 'pass':52 'physic':89,152 'pin':97 'present':161 'privaci':187 'process':9 'ram':17,30 'result':63 'return':58 'save':101 'scrambl':60 'secur':2,112,119,170,180 'seen':75 'separ':130,183 'someth':27,155 'steal':90 'support':23 'thing':121 'tpm':104,176 'unscrambl':62 'use':13,128,174 'util':139 'want':117 'way':25,43,81 'without':20,88 'wouldn':123"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7726643"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703969451 {#3958
    date: 2023-12-30 21:50:51.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
8 DENIED moderate 
App\Entity\EntryComment {#4013
  +user: App\Entity\User {#3961 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "A security module or a key fob/smart card processes the key internally using its own dedicated ram and cpu without any debugging support. This way, even something will full ram and cpu access or a compromise of your machine, there is no way to export or access the key. Data is passed to the module and it returns the scrambled or unscrambled result based on the key which no body knows or has ever seen. A key locked with no way to access can’t be hacked without physically stealing the module, which is where your pin comes in to save you. The TPM is a very important part of a secure boot chain. If you want to secure other things I wouldn’t blame you for using a separate module or fob that isn’t always connected util it’s actually needed and it should only be activated with a physical button or something so you have to be present to engage with it. This adds even more security. So you could use the TPM for boot chain security and a separate fob or data privacy for example."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1703969451 {#4022
    date: 2023-12-30 21:50:51.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4011 …}
  +nested: Doctrine\ORM\PersistentCollection {#4009 …}
  +votes: Doctrine\ORM\PersistentCollection {#4007 …}
  +reports: Doctrine\ORM\PersistentCollection {#4005 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3973 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3977 …}
  -id: 271518
  -bodyTs: "'access':33,47,83 'activ':149 'actual':142 'add':167 'alway':137 'base':64 'blame':125 'bodi':70 'boot':113,178 'button':153 'card':8 'chain':114,179 'come':98 'compromis':36 'connect':138 'could':173 'cpu':19,32 'data':50,186 'debug':22 'dedic':16 'engag':163 'even':26,168 'ever':74 'exampl':189 'export':45 'fob':133,184 'fob/smart':7 'full':29 'hack':87 'import':108 'intern':12 'isn':135 'key':6,11,49,67,77 'know':71 'lock':78 'machin':39 'modul':3,55,92,131 'need':143 'part':109 'pass':52 'physic':89,152 'pin':97 'present':161 'privaci':187 'process':9 'ram':17,30 'result':63 'return':58 'save':101 'scrambl':60 'secur':2,112,119,170,180 'seen':75 'separ':130,183 'someth':27,155 'steal':90 'support':23 'thing':121 'tpm':104,176 'unscrambl':62 'use':13,128,174 'util':139 'want':117 'way':25,43,81 'without':20,88 'wouldn':123"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7726643"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703969451 {#3958
    date: 2023-12-30 21:50:51.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
10 DENIED moderate 
App\Entity\EntryComment {#4045
  +user: App\Entity\User {#4034 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    100% Yes\n
    \n
    - Currently using `systemd-creds` to displace any secrets in env\n
    - Spending time getting to grips with Keylime
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1703594653 {#4051
    date: 2023-12-26 13:44:13.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4050 …}
  +nested: Doctrine\ORM\PersistentCollection {#4049 …}
  +votes: Doctrine\ORM\PersistentCollection {#4040 …}
  +reports: Doctrine\ORM\PersistentCollection {#4043 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4038 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4036 …}
  -id: 253454
  -bodyTs: "'100':1 'cred':7 'current':3 'displac':9 'env':13 'get':16 'grip':18 'keylim':20 'secret':11 'spend':14 'systemd':6 'systemd-cr':5 'time':15 'use':4 'yes':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://infosec.pub/comment/5258480"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703594653 {#4056
    date: 2023-12-26 13:44:13.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
11 DENIED edit 
App\Entity\EntryComment {#4045
  +user: App\Entity\User {#4034 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    100% Yes\n
    \n
    - Currently using `systemd-creds` to displace any secrets in env\n
    - Spending time getting to grips with Keylime
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1703594653 {#4051
    date: 2023-12-26 13:44:13.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4050 …}
  +nested: Doctrine\ORM\PersistentCollection {#4049 …}
  +votes: Doctrine\ORM\PersistentCollection {#4040 …}
  +reports: Doctrine\ORM\PersistentCollection {#4043 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4038 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4036 …}
  -id: 253454
  -bodyTs: "'100':1 'cred':7 'current':3 'displac':9 'env':13 'get':16 'grip':18 'keylim':20 'secret':11 'spend':14 'systemd':6 'systemd-cr':5 'time':15 'use':4 'yes':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://infosec.pub/comment/5258480"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703594653 {#4056
    date: 2023-12-26 13:44:13.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
12 DENIED moderate 
App\Entity\EntryComment {#4045
  +user: App\Entity\User {#4034 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    100% Yes\n
    \n
    - Currently using `systemd-creds` to displace any secrets in env\n
    - Spending time getting to grips with Keylime
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1703594653 {#4051
    date: 2023-12-26 13:44:13.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4050 …}
  +nested: Doctrine\ORM\PersistentCollection {#4049 …}
  +votes: Doctrine\ORM\PersistentCollection {#4040 …}
  +reports: Doctrine\ORM\PersistentCollection {#4043 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4038 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4036 …}
  -id: 253454
  -bodyTs: "'100':1 'cred':7 'current':3 'displac':9 'env':13 'get':16 'grip':18 'keylim':20 'secret':11 'spend':14 'systemd':6 'systemd-cr':5 'time':15 'use':4 'yes':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://infosec.pub/comment/5258480"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703594653 {#4056
    date: 2023-12-26 13:44:13.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
13 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
14 DENIED moderate 
App\Entity\EntryComment {#4131
  +user: App\Entity\User {#4144 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
    \n
    Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1708143580 {#4126
    date: 2024-02-17 05:19:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4132 …}
  +nested: Doctrine\ORM\PersistentCollection {#4134 …}
  +votes: Doctrine\ORM\PersistentCollection {#4136 …}
  +reports: Doctrine\ORM\PersistentCollection {#4138 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
  -id: 252362
  -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6242299"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703551220 {#4127
    date: 2023-12-26 01:40:20.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
15 DENIED edit 
App\Entity\EntryComment {#4131
  +user: App\Entity\User {#4144 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
    \n
    Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1708143580 {#4126
    date: 2024-02-17 05:19:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4132 …}
  +nested: Doctrine\ORM\PersistentCollection {#4134 …}
  +votes: Doctrine\ORM\PersistentCollection {#4136 …}
  +reports: Doctrine\ORM\PersistentCollection {#4138 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
  -id: 252362
  -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6242299"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703551220 {#4127
    date: 2023-12-26 01:40:20.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
16 DENIED moderate 
App\Entity\EntryComment {#4131
  +user: App\Entity\User {#4144 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
    \n
    Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1708143580 {#4126
    date: 2024-02-17 05:19:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4132 …}
  +nested: Doctrine\ORM\PersistentCollection {#4134 …}
  +votes: Doctrine\ORM\PersistentCollection {#4136 …}
  +reports: Doctrine\ORM\PersistentCollection {#4138 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
  -id: 252362
  -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6242299"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703551220 {#4127
    date: 2023-12-26 01:40:20.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
17 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
18 DENIED moderate 
App\Entity\EntryComment {#4778
  +user: Proxies\__CG__\App\Entity\User {#4763 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4131
    +user: App\Entity\User {#4144 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
      \n
      Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1708143580 {#4126
      date: 2024-02-17 05:19:40.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4132 …}
    +nested: Doctrine\ORM\PersistentCollection {#4134 …}
    +votes: Doctrine\ORM\PersistentCollection {#4136 …}
    +reports: Doctrine\ORM\PersistentCollection {#4138 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
    -id: 252362
    -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6242299"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703551220 {#4127
      date: 2023-12-26 01:40:20.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: "Can you explain a bit on how the key erasure works? AFAIK TPM only refuse to release the key when certain PCR dont match, is there a setting to let it erase key?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703602323 {#4776
    date: 2023-12-26 15:52:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4779 …}
  +nested: Doctrine\ORM\PersistentCollection {#4781 …}
  +votes: Doctrine\ORM\PersistentCollection {#4783 …}
  +reports: Doctrine\ORM\PersistentCollection {#4785 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4787 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4789 …}
  -id: 254610
  -bodyTs: "'afaik':12 'bit':5 'certain':21 'dont':23 'eras':32 'erasur':10 'explain':3 'key':9,19,33 'let':30 'match':24 'pcr':22 'refus':15 'releas':17 'set':28 'tpm':13 'work':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://mander.xyz/comment/6274855"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703602323 {#4777
    date: 2023-12-26 15:52:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
19 DENIED edit 
App\Entity\EntryComment {#4778
  +user: Proxies\__CG__\App\Entity\User {#4763 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4131
    +user: App\Entity\User {#4144 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
      \n
      Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1708143580 {#4126
      date: 2024-02-17 05:19:40.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4132 …}
    +nested: Doctrine\ORM\PersistentCollection {#4134 …}
    +votes: Doctrine\ORM\PersistentCollection {#4136 …}
    +reports: Doctrine\ORM\PersistentCollection {#4138 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
    -id: 252362
    -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6242299"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703551220 {#4127
      date: 2023-12-26 01:40:20.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: "Can you explain a bit on how the key erasure works? AFAIK TPM only refuse to release the key when certain PCR dont match, is there a setting to let it erase key?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703602323 {#4776
    date: 2023-12-26 15:52:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4779 …}
  +nested: Doctrine\ORM\PersistentCollection {#4781 …}
  +votes: Doctrine\ORM\PersistentCollection {#4783 …}
  +reports: Doctrine\ORM\PersistentCollection {#4785 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4787 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4789 …}
  -id: 254610
  -bodyTs: "'afaik':12 'bit':5 'certain':21 'dont':23 'eras':32 'erasur':10 'explain':3 'key':9,19,33 'let':30 'match':24 'pcr':22 'refus':15 'releas':17 'set':28 'tpm':13 'work':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://mander.xyz/comment/6274855"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703602323 {#4777
    date: 2023-12-26 15:52:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
20 DENIED moderate 
App\Entity\EntryComment {#4778
  +user: Proxies\__CG__\App\Entity\User {#4763 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4131
    +user: App\Entity\User {#4144 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
      \n
      Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1708143580 {#4126
      date: 2024-02-17 05:19:40.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4132 …}
    +nested: Doctrine\ORM\PersistentCollection {#4134 …}
    +votes: Doctrine\ORM\PersistentCollection {#4136 …}
    +reports: Doctrine\ORM\PersistentCollection {#4138 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
    -id: 252362
    -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6242299"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703551220 {#4127
      date: 2023-12-26 01:40:20.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: "Can you explain a bit on how the key erasure works? AFAIK TPM only refuse to release the key when certain PCR dont match, is there a setting to let it erase key?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703602323 {#4776
    date: 2023-12-26 15:52:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4779 …}
  +nested: Doctrine\ORM\PersistentCollection {#4781 …}
  +votes: Doctrine\ORM\PersistentCollection {#4783 …}
  +reports: Doctrine\ORM\PersistentCollection {#4785 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4787 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4789 …}
  -id: 254610
  -bodyTs: "'afaik':12 'bit':5 'certain':21 'dont':23 'eras':32 'erasur':10 'explain':3 'key':9,19,33 'let':30 'match':24 'pcr':22 'refus':15 'releas':17 'set':28 'tpm':13 'work':11"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://mander.xyz/comment/6274855"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703602323 {#4777
    date: 2023-12-26 15:52:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
21 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
22 DENIED moderate 
App\Entity\EntryComment {#4863
  +user: App\Entity\User {#4144 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4778
    +user: Proxies\__CG__\App\Entity\User {#4763 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4131
      +user: App\Entity\User {#4144 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
        \n
        Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 6
      +score: 0
      +lastActive: DateTime @1708143580 {#4126
        date: 2024-02-17 05:19:40.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4132 …}
      +nested: Doctrine\ORM\PersistentCollection {#4134 …}
      +votes: Doctrine\ORM\PersistentCollection {#4136 …}
      +reports: Doctrine\ORM\PersistentCollection {#4138 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
      -id: 252362
      -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6242299"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703551220 {#4127
        date: 2023-12-26 01:40:20.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4131}
    +body: "Can you explain a bit on how the key erasure works? AFAIK TPM only refuse to release the key when certain PCR dont match, is there a setting to let it erase key?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1703602323 {#4776
      date: 2023-12-26 15:52:03.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@richardisaguy@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4779 …}
    +nested: Doctrine\ORM\PersistentCollection {#4781 …}
    +votes: Doctrine\ORM\PersistentCollection {#4783 …}
    +reports: Doctrine\ORM\PersistentCollection {#4785 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4787 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4789 …}
    -id: 254610
    -bodyTs: "'afaik':12 'bit':5 'certain':21 'dont':23 'eras':32 'erasur':10 'explain':3 'key':9,19,33 'let':30 'match':24 'pcr':22 'refus':15 'releas':17 'set':28 'tpm':13 'work':11"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://mander.xyz/comment/6274855"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703602323 {#4777
      date: 2023-12-26 15:52:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: """
    [fedoramagazine.org/automatically-decrypt-your-dis…](https://fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)\n
    \n
    I’ve read this article to make my setup, but its very informative about the function of TPM too
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703625186 {#4861
    date: 2023-12-26 22:13:06.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
    "@baseless_discourse@mander.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4864 …}
  +nested: Doctrine\ORM\PersistentCollection {#4866 …}
  +votes: Doctrine\ORM\PersistentCollection {#4868 …}
  +reports: Doctrine\ORM\PersistentCollection {#4870 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4872 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4874 …}
  -id: 254709
  -bodyTs: "'/automatically-decrypt-your-dis':3 '/automatically-decrypt-your-disk-using-tpm2/)':6 'articl':11 'fedoramagazine.org':2,5 'fedoramagazine.org/automatically-decrypt-your-dis':1 'fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)':4 'function':22 'inform':19 'make':13 'read':9 'setup':15 'tpm':24 've':8"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6253806"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703625186 {#4862
    date: 2023-12-26 22:13:06.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
23 DENIED edit 
App\Entity\EntryComment {#4863
  +user: App\Entity\User {#4144 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4778
    +user: Proxies\__CG__\App\Entity\User {#4763 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4131
      +user: App\Entity\User {#4144 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
        \n
        Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 6
      +score: 0
      +lastActive: DateTime @1708143580 {#4126
        date: 2024-02-17 05:19:40.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4132 …}
      +nested: Doctrine\ORM\PersistentCollection {#4134 …}
      +votes: Doctrine\ORM\PersistentCollection {#4136 …}
      +reports: Doctrine\ORM\PersistentCollection {#4138 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
      -id: 252362
      -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6242299"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703551220 {#4127
        date: 2023-12-26 01:40:20.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4131}
    +body: "Can you explain a bit on how the key erasure works? AFAIK TPM only refuse to release the key when certain PCR dont match, is there a setting to let it erase key?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1703602323 {#4776
      date: 2023-12-26 15:52:03.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@richardisaguy@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4779 …}
    +nested: Doctrine\ORM\PersistentCollection {#4781 …}
    +votes: Doctrine\ORM\PersistentCollection {#4783 …}
    +reports: Doctrine\ORM\PersistentCollection {#4785 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4787 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4789 …}
    -id: 254610
    -bodyTs: "'afaik':12 'bit':5 'certain':21 'dont':23 'eras':32 'erasur':10 'explain':3 'key':9,19,33 'let':30 'match':24 'pcr':22 'refus':15 'releas':17 'set':28 'tpm':13 'work':11"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://mander.xyz/comment/6274855"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703602323 {#4777
      date: 2023-12-26 15:52:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: """
    [fedoramagazine.org/automatically-decrypt-your-dis…](https://fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)\n
    \n
    I’ve read this article to make my setup, but its very informative about the function of TPM too
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703625186 {#4861
    date: 2023-12-26 22:13:06.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
    "@baseless_discourse@mander.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4864 …}
  +nested: Doctrine\ORM\PersistentCollection {#4866 …}
  +votes: Doctrine\ORM\PersistentCollection {#4868 …}
  +reports: Doctrine\ORM\PersistentCollection {#4870 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4872 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4874 …}
  -id: 254709
  -bodyTs: "'/automatically-decrypt-your-dis':3 '/automatically-decrypt-your-disk-using-tpm2/)':6 'articl':11 'fedoramagazine.org':2,5 'fedoramagazine.org/automatically-decrypt-your-dis':1 'fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)':4 'function':22 'inform':19 'make':13 'read':9 'setup':15 'tpm':24 've':8"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6253806"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703625186 {#4862
    date: 2023-12-26 22:13:06.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
24 DENIED moderate 
App\Entity\EntryComment {#4863
  +user: App\Entity\User {#4144 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4778
    +user: Proxies\__CG__\App\Entity\User {#4763 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4131
      +user: App\Entity\User {#4144 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
        \n
        Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 6
      +score: 0
      +lastActive: DateTime @1708143580 {#4126
        date: 2024-02-17 05:19:40.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4132 …}
      +nested: Doctrine\ORM\PersistentCollection {#4134 …}
      +votes: Doctrine\ORM\PersistentCollection {#4136 …}
      +reports: Doctrine\ORM\PersistentCollection {#4138 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
      -id: 252362
      -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6242299"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703551220 {#4127
        date: 2023-12-26 01:40:20.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4131}
    +body: "Can you explain a bit on how the key erasure works? AFAIK TPM only refuse to release the key when certain PCR dont match, is there a setting to let it erase key?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1703602323 {#4776
      date: 2023-12-26 15:52:03.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@richardisaguy@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4779 …}
    +nested: Doctrine\ORM\PersistentCollection {#4781 …}
    +votes: Doctrine\ORM\PersistentCollection {#4783 …}
    +reports: Doctrine\ORM\PersistentCollection {#4785 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4787 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4789 …}
    -id: 254610
    -bodyTs: "'afaik':12 'bit':5 'certain':21 'dont':23 'eras':32 'erasur':10 'explain':3 'key':9,19,33 'let':30 'match':24 'pcr':22 'refus':15 'releas':17 'set':28 'tpm':13 'work':11"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://mander.xyz/comment/6274855"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703602323 {#4777
      date: 2023-12-26 15:52:03.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: """
    [fedoramagazine.org/automatically-decrypt-your-dis…](https://fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)\n
    \n
    I’ve read this article to make my setup, but its very informative about the function of TPM too
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703625186 {#4861
    date: 2023-12-26 22:13:06.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
    "@baseless_discourse@mander.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4864 …}
  +nested: Doctrine\ORM\PersistentCollection {#4866 …}
  +votes: Doctrine\ORM\PersistentCollection {#4868 …}
  +reports: Doctrine\ORM\PersistentCollection {#4870 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4872 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4874 …}
  -id: 254709
  -bodyTs: "'/automatically-decrypt-your-dis':3 '/automatically-decrypt-your-disk-using-tpm2/)':6 'articl':11 'fedoramagazine.org':2,5 'fedoramagazine.org/automatically-decrypt-your-dis':1 'fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)':4 'function':22 'inform':19 'make':13 'read':9 'setup':15 'tpm':24 've':8"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6253806"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703625186 {#4862
    date: 2023-12-26 22:13:06.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
25 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
26 DENIED moderate 
App\Entity\EntryComment {#4947
  +user: Proxies\__CG__\App\Entity\User {#4763 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4863
    +user: App\Entity\User {#4144 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4778
      +user: Proxies\__CG__\App\Entity\User {#4763 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4131
        +user: App\Entity\User {#4144 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: """
          I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
          \n
          Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 6
        +score: 0
        +lastActive: DateTime @1708143580 {#4126
          date: 2024-02-17 05:19:40.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4132 …}
        +nested: Doctrine\ORM\PersistentCollection {#4134 …}
        +votes: Doctrine\ORM\PersistentCollection {#4136 …}
        +reports: Doctrine\ORM\PersistentCollection {#4138 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
        -id: 252362
        -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.world/comment/6242299"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703551220 {#4127
          date: 2023-12-26 01:40:20.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4131}
      +body: "Can you explain a bit on how the key erasure works? AFAIK TPM only refuse to release the key when certain PCR dont match, is there a setting to let it erase key?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1703602323 {#4776
        date: 2023-12-26 15:52:03.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@richardisaguy@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4779 …}
      +nested: Doctrine\ORM\PersistentCollection {#4781 …}
      +votes: Doctrine\ORM\PersistentCollection {#4783 …}
      +reports: Doctrine\ORM\PersistentCollection {#4785 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4787 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4789 …}
      -id: 254610
      -bodyTs: "'afaik':12 'bit':5 'certain':21 'dont':23 'eras':32 'erasur':10 'explain':3 'key':9,19,33 'let':30 'match':24 'pcr':22 'refus':15 'releas':17 'set':28 'tpm':13 'work':11"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://mander.xyz/comment/6274855"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703602323 {#4777
        date: 2023-12-26 15:52:03.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4131}
    +body: """
      [fedoramagazine.org/automatically-decrypt-your-dis…](https://fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)\n
      \n
      I’ve read this article to make my setup, but its very informative about the function of TPM too
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1703625186 {#4861
      date: 2023-12-26 22:13:06.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@richardisaguy@lemmy.world"
      "@baseless_discourse@mander.xyz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4864 …}
    +nested: Doctrine\ORM\PersistentCollection {#4866 …}
    +votes: Doctrine\ORM\PersistentCollection {#4868 …}
    +reports: Doctrine\ORM\PersistentCollection {#4870 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4872 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4874 …}
    -id: 254709
    -bodyTs: "'/automatically-decrypt-your-dis':3 '/automatically-decrypt-your-disk-using-tpm2/)':6 'articl':11 'fedoramagazine.org':2,5 'fedoramagazine.org/automatically-decrypt-your-dis':1 'fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)':4 'function':22 'inform':19 'make':13 'read':9 'setup':15 'tpm':24 've':8"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6253806"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703625186 {#4862
      date: 2023-12-26 22:13:06.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: "I have read that article, it doesn’t seem to mention that TPM will erase key if a different OS is loaded, maybe I missed something?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703626426 {#4945
    date: 2023-12-26 22:33:46.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
    "@baseless_discourse@mander.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4948 …}
  +nested: Doctrine\ORM\PersistentCollection {#4950 …}
  +votes: Doctrine\ORM\PersistentCollection {#4952 …}
  +reports: Doctrine\ORM\PersistentCollection {#4954 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4956 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4958 …}
  -id: 254759
  -bodyTs: "'articl':5 'differ':19 'doesn':7 'eras':15 'key':16 'load':22 'mayb':23 'mention':11 'miss':25 'os':20 'read':3 'seem':9 'someth':26 'tpm':13"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://mander.xyz/comment/6281069"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703626426 {#4946
    date: 2023-12-26 22:33:46.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
27 DENIED edit 
App\Entity\EntryComment {#4947
  +user: Proxies\__CG__\App\Entity\User {#4763 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4863
    +user: App\Entity\User {#4144 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4778
      +user: Proxies\__CG__\App\Entity\User {#4763 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4131
        +user: App\Entity\User {#4144 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: """
          I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
          \n
          Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 6
        +score: 0
        +lastActive: DateTime @1708143580 {#4126
          date: 2024-02-17 05:19:40.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4132 …}
        +nested: Doctrine\ORM\PersistentCollection {#4134 …}
        +votes: Doctrine\ORM\PersistentCollection {#4136 …}
        +reports: Doctrine\ORM\PersistentCollection {#4138 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
        -id: 252362
        -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.world/comment/6242299"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703551220 {#4127
          date: 2023-12-26 01:40:20.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4131}
      +body: "Can you explain a bit on how the key erasure works? AFAIK TPM only refuse to release the key when certain PCR dont match, is there a setting to let it erase key?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1703602323 {#4776
        date: 2023-12-26 15:52:03.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@richardisaguy@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4779 …}
      +nested: Doctrine\ORM\PersistentCollection {#4781 …}
      +votes: Doctrine\ORM\PersistentCollection {#4783 …}
      +reports: Doctrine\ORM\PersistentCollection {#4785 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4787 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4789 …}
      -id: 254610
      -bodyTs: "'afaik':12 'bit':5 'certain':21 'dont':23 'eras':32 'erasur':10 'explain':3 'key':9,19,33 'let':30 'match':24 'pcr':22 'refus':15 'releas':17 'set':28 'tpm':13 'work':11"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://mander.xyz/comment/6274855"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703602323 {#4777
        date: 2023-12-26 15:52:03.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4131}
    +body: """
      [fedoramagazine.org/automatically-decrypt-your-dis…](https://fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)\n
      \n
      I’ve read this article to make my setup, but its very informative about the function of TPM too
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1703625186 {#4861
      date: 2023-12-26 22:13:06.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@richardisaguy@lemmy.world"
      "@baseless_discourse@mander.xyz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4864 …}
    +nested: Doctrine\ORM\PersistentCollection {#4866 …}
    +votes: Doctrine\ORM\PersistentCollection {#4868 …}
    +reports: Doctrine\ORM\PersistentCollection {#4870 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4872 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4874 …}
    -id: 254709
    -bodyTs: "'/automatically-decrypt-your-dis':3 '/automatically-decrypt-your-disk-using-tpm2/)':6 'articl':11 'fedoramagazine.org':2,5 'fedoramagazine.org/automatically-decrypt-your-dis':1 'fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)':4 'function':22 'inform':19 'make':13 'read':9 'setup':15 'tpm':24 've':8"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6253806"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703625186 {#4862
      date: 2023-12-26 22:13:06.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: "I have read that article, it doesn’t seem to mention that TPM will erase key if a different OS is loaded, maybe I missed something?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703626426 {#4945
    date: 2023-12-26 22:33:46.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
    "@baseless_discourse@mander.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4948 …}
  +nested: Doctrine\ORM\PersistentCollection {#4950 …}
  +votes: Doctrine\ORM\PersistentCollection {#4952 …}
  +reports: Doctrine\ORM\PersistentCollection {#4954 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4956 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4958 …}
  -id: 254759
  -bodyTs: "'articl':5 'differ':19 'doesn':7 'eras':15 'key':16 'load':22 'mayb':23 'mention':11 'miss':25 'os':20 'read':3 'seem':9 'someth':26 'tpm':13"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://mander.xyz/comment/6281069"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703626426 {#4946
    date: 2023-12-26 22:33:46.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
28 DENIED moderate 
App\Entity\EntryComment {#4947
  +user: Proxies\__CG__\App\Entity\User {#4763 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4863
    +user: App\Entity\User {#4144 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4778
      +user: Proxies\__CG__\App\Entity\User {#4763 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4131
        +user: App\Entity\User {#4144 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: """
          I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
          \n
          Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 6
        +score: 0
        +lastActive: DateTime @1708143580 {#4126
          date: 2024-02-17 05:19:40.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4132 …}
        +nested: Doctrine\ORM\PersistentCollection {#4134 …}
        +votes: Doctrine\ORM\PersistentCollection {#4136 …}
        +reports: Doctrine\ORM\PersistentCollection {#4138 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
        -id: 252362
        -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://lemmy.world/comment/6242299"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703551220 {#4127
          date: 2023-12-26 01:40:20.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4131}
      +body: "Can you explain a bit on how the key erasure works? AFAIK TPM only refuse to release the key when certain PCR dont match, is there a setting to let it erase key?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1703602323 {#4776
        date: 2023-12-26 15:52:03.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@richardisaguy@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4779 …}
      +nested: Doctrine\ORM\PersistentCollection {#4781 …}
      +votes: Doctrine\ORM\PersistentCollection {#4783 …}
      +reports: Doctrine\ORM\PersistentCollection {#4785 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4787 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4789 …}
      -id: 254610
      -bodyTs: "'afaik':12 'bit':5 'certain':21 'dont':23 'eras':32 'erasur':10 'explain':3 'key':9,19,33 'let':30 'match':24 'pcr':22 'refus':15 'releas':17 'set':28 'tpm':13 'work':11"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://mander.xyz/comment/6274855"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703602323 {#4777
        date: 2023-12-26 15:52:03.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4131}
    +body: """
      [fedoramagazine.org/automatically-decrypt-your-dis…](https://fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)\n
      \n
      I’ve read this article to make my setup, but its very informative about the function of TPM too
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1703625186 {#4861
      date: 2023-12-26 22:13:06.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@richardisaguy@lemmy.world"
      "@baseless_discourse@mander.xyz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4864 …}
    +nested: Doctrine\ORM\PersistentCollection {#4866 …}
    +votes: Doctrine\ORM\PersistentCollection {#4868 …}
    +reports: Doctrine\ORM\PersistentCollection {#4870 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4872 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4874 …}
    -id: 254709
    -bodyTs: "'/automatically-decrypt-your-dis':3 '/automatically-decrypt-your-disk-using-tpm2/)':6 'articl':11 'fedoramagazine.org':2,5 'fedoramagazine.org/automatically-decrypt-your-dis':1 'fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)':4 'function':22 'inform':19 'make':13 'read':9 'setup':15 'tpm':24 've':8"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6253806"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703625186 {#4862
      date: 2023-12-26 22:13:06.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: "I have read that article, it doesn’t seem to mention that TPM will erase key if a different OS is loaded, maybe I missed something?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703626426 {#4945
    date: 2023-12-26 22:33:46.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
    "@baseless_discourse@mander.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4948 …}
  +nested: Doctrine\ORM\PersistentCollection {#4950 …}
  +votes: Doctrine\ORM\PersistentCollection {#4952 …}
  +reports: Doctrine\ORM\PersistentCollection {#4954 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4956 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4958 …}
  -id: 254759
  -bodyTs: "'articl':5 'differ':19 'doesn':7 'eras':15 'key':16 'load':22 'mayb':23 'mention':11 'miss':25 'os':20 'read':3 'seem':9 'someth':26 'tpm':13"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://mander.xyz/comment/6281069"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703626426 {#4946
    date: 2023-12-26 22:33:46.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
29 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
30 DENIED moderate 
App\Entity\EntryComment {#5016
  +user: App\Entity\User {#4144 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4947
    +user: Proxies\__CG__\App\Entity\User {#4763 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4863
      +user: App\Entity\User {#4144 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4778
        +user: Proxies\__CG__\App\Entity\User {#4763 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4131
          +user: App\Entity\User {#4144 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: null
          +root: null
          +body: """
            I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
            \n
            Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 6
          +score: 0
          +lastActive: DateTime @1708143580 {#4126
            date: 2024-02-17 05:19:40.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4132 …}
          +nested: Doctrine\ORM\PersistentCollection {#4134 …}
          +votes: Doctrine\ORM\PersistentCollection {#4136 …}
          +reports: Doctrine\ORM\PersistentCollection {#4138 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
          -id: 252362
          -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://lemmy.world/comment/6242299"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703551220 {#4127
            date: 2023-12-26 01:40:20.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4131}
        +body: "Can you explain a bit on how the key erasure works? AFAIK TPM only refuse to release the key when certain PCR dont match, is there a setting to let it erase key?"
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1703602323 {#4776
          date: 2023-12-26 15:52:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@richardisaguy@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4779 …}
        +nested: Doctrine\ORM\PersistentCollection {#4781 …}
        +votes: Doctrine\ORM\PersistentCollection {#4783 …}
        +reports: Doctrine\ORM\PersistentCollection {#4785 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4787 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4789 …}
        -id: 254610
        -bodyTs: "'afaik':12 'bit':5 'certain':21 'dont':23 'eras':32 'erasur':10 'explain':3 'key':9,19,33 'let':30 'match':24 'pcr':22 'refus':15 'releas':17 'set':28 'tpm':13 'work':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://mander.xyz/comment/6274855"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703602323 {#4777
          date: 2023-12-26 15:52:03.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4131}
      +body: """
        [fedoramagazine.org/automatically-decrypt-your-dis…](https://fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)\n
        \n
        I’ve read this article to make my setup, but its very informative about the function of TPM too
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1703625186 {#4861
        date: 2023-12-26 22:13:06.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@richardisaguy@lemmy.world"
        "@baseless_discourse@mander.xyz"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4864 …}
      +nested: Doctrine\ORM\PersistentCollection {#4866 …}
      +votes: Doctrine\ORM\PersistentCollection {#4868 …}
      +reports: Doctrine\ORM\PersistentCollection {#4870 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4872 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4874 …}
      -id: 254709
      -bodyTs: "'/automatically-decrypt-your-dis':3 '/automatically-decrypt-your-disk-using-tpm2/)':6 'articl':11 'fedoramagazine.org':2,5 'fedoramagazine.org/automatically-decrypt-your-dis':1 'fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)':4 'function':22 'inform':19 'make':13 'read':9 'setup':15 'tpm':24 've':8"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6253806"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703625186 {#4862
        date: 2023-12-26 22:13:06.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4131}
    +body: "I have read that article, it doesn’t seem to mention that TPM will erase key if a different OS is loaded, maybe I missed something?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1703626426 {#4945
      date: 2023-12-26 22:33:46.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@richardisaguy@lemmy.world"
      "@baseless_discourse@mander.xyz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4948 …}
    +nested: Doctrine\ORM\PersistentCollection {#4950 …}
    +votes: Doctrine\ORM\PersistentCollection {#4952 …}
    +reports: Doctrine\ORM\PersistentCollection {#4954 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4956 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4958 …}
    -id: 254759
    -bodyTs: "'articl':5 'differ':19 'doesn':7 'eras':15 'key':16 'load':22 'mayb':23 'mention':11 'miss':25 'os':20 'read':3 'seem':9 'someth':26 'tpm':13"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://mander.xyz/comment/6281069"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703626426 {#4946
      date: 2023-12-26 22:33:46.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: "It talsk about pcr, every time another OS is booted some pcsrs are changed, and if the keys are installed on the correct ones, this will lead to it being erased"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703631965 {#5014
    date: 2023-12-27 00:06:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
    "@baseless_discourse@mander.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5017 …}
  +nested: Doctrine\ORM\PersistentCollection {#5019 …}
  +votes: Doctrine\ORM\PersistentCollection {#5021 …}
  +reports: Doctrine\ORM\PersistentCollection {#5023 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5025 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5027 …}
  -id: 254972
  -bodyTs: "'anoth':7 'boot':10 'chang':14 'correct':23 'eras':31 'everi':5 'instal':20 'key':18 'lead':27 'one':24 'os':8 'pcr':4 'pcsrs':12 'talsk':2 'time':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6255088"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703631965 {#5015
    date: 2023-12-27 00:06:05.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
31 DENIED edit 
App\Entity\EntryComment {#5016
  +user: App\Entity\User {#4144 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4947
    +user: Proxies\__CG__\App\Entity\User {#4763 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4863
      +user: App\Entity\User {#4144 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4778
        +user: Proxies\__CG__\App\Entity\User {#4763 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4131
          +user: App\Entity\User {#4144 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: null
          +root: null
          +body: """
            I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
            \n
            Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 6
          +score: 0
          +lastActive: DateTime @1708143580 {#4126
            date: 2024-02-17 05:19:40.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4132 …}
          +nested: Doctrine\ORM\PersistentCollection {#4134 …}
          +votes: Doctrine\ORM\PersistentCollection {#4136 …}
          +reports: Doctrine\ORM\PersistentCollection {#4138 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
          -id: 252362
          -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://lemmy.world/comment/6242299"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703551220 {#4127
            date: 2023-12-26 01:40:20.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4131}
        +body: "Can you explain a bit on how the key erasure works? AFAIK TPM only refuse to release the key when certain PCR dont match, is there a setting to let it erase key?"
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1703602323 {#4776
          date: 2023-12-26 15:52:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@richardisaguy@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4779 …}
        +nested: Doctrine\ORM\PersistentCollection {#4781 …}
        +votes: Doctrine\ORM\PersistentCollection {#4783 …}
        +reports: Doctrine\ORM\PersistentCollection {#4785 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4787 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4789 …}
        -id: 254610
        -bodyTs: "'afaik':12 'bit':5 'certain':21 'dont':23 'eras':32 'erasur':10 'explain':3 'key':9,19,33 'let':30 'match':24 'pcr':22 'refus':15 'releas':17 'set':28 'tpm':13 'work':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://mander.xyz/comment/6274855"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703602323 {#4777
          date: 2023-12-26 15:52:03.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4131}
      +body: """
        [fedoramagazine.org/automatically-decrypt-your-dis…](https://fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)\n
        \n
        I’ve read this article to make my setup, but its very informative about the function of TPM too
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1703625186 {#4861
        date: 2023-12-26 22:13:06.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@richardisaguy@lemmy.world"
        "@baseless_discourse@mander.xyz"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4864 …}
      +nested: Doctrine\ORM\PersistentCollection {#4866 …}
      +votes: Doctrine\ORM\PersistentCollection {#4868 …}
      +reports: Doctrine\ORM\PersistentCollection {#4870 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4872 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4874 …}
      -id: 254709
      -bodyTs: "'/automatically-decrypt-your-dis':3 '/automatically-decrypt-your-disk-using-tpm2/)':6 'articl':11 'fedoramagazine.org':2,5 'fedoramagazine.org/automatically-decrypt-your-dis':1 'fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)':4 'function':22 'inform':19 'make':13 'read':9 'setup':15 'tpm':24 've':8"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6253806"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703625186 {#4862
        date: 2023-12-26 22:13:06.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4131}
    +body: "I have read that article, it doesn’t seem to mention that TPM will erase key if a different OS is loaded, maybe I missed something?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1703626426 {#4945
      date: 2023-12-26 22:33:46.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@richardisaguy@lemmy.world"
      "@baseless_discourse@mander.xyz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4948 …}
    +nested: Doctrine\ORM\PersistentCollection {#4950 …}
    +votes: Doctrine\ORM\PersistentCollection {#4952 …}
    +reports: Doctrine\ORM\PersistentCollection {#4954 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4956 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4958 …}
    -id: 254759
    -bodyTs: "'articl':5 'differ':19 'doesn':7 'eras':15 'key':16 'load':22 'mayb':23 'mention':11 'miss':25 'os':20 'read':3 'seem':9 'someth':26 'tpm':13"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://mander.xyz/comment/6281069"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703626426 {#4946
      date: 2023-12-26 22:33:46.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: "It talsk about pcr, every time another OS is booted some pcsrs are changed, and if the keys are installed on the correct ones, this will lead to it being erased"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703631965 {#5014
    date: 2023-12-27 00:06:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
    "@baseless_discourse@mander.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5017 …}
  +nested: Doctrine\ORM\PersistentCollection {#5019 …}
  +votes: Doctrine\ORM\PersistentCollection {#5021 …}
  +reports: Doctrine\ORM\PersistentCollection {#5023 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5025 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5027 …}
  -id: 254972
  -bodyTs: "'anoth':7 'boot':10 'chang':14 'correct':23 'eras':31 'everi':5 'instal':20 'key':18 'lead':27 'one':24 'os':8 'pcr':4 'pcsrs':12 'talsk':2 'time':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6255088"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703631965 {#5015
    date: 2023-12-27 00:06:05.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
32 DENIED moderate 
App\Entity\EntryComment {#5016
  +user: App\Entity\User {#4144 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4947
    +user: Proxies\__CG__\App\Entity\User {#4763 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4863
      +user: App\Entity\User {#4144 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4778
        +user: Proxies\__CG__\App\Entity\User {#4763 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4131
          +user: App\Entity\User {#4144 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: null
          +root: null
          +body: """
            I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
            \n
            Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 6
          +score: 0
          +lastActive: DateTime @1708143580 {#4126
            date: 2024-02-17 05:19:40.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4132 …}
          +nested: Doctrine\ORM\PersistentCollection {#4134 …}
          +votes: Doctrine\ORM\PersistentCollection {#4136 …}
          +reports: Doctrine\ORM\PersistentCollection {#4138 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
          -id: 252362
          -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://lemmy.world/comment/6242299"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703551220 {#4127
            date: 2023-12-26 01:40:20.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4131}
        +body: "Can you explain a bit on how the key erasure works? AFAIK TPM only refuse to release the key when certain PCR dont match, is there a setting to let it erase key?"
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1703602323 {#4776
          date: 2023-12-26 15:52:03.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@richardisaguy@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4779 …}
        +nested: Doctrine\ORM\PersistentCollection {#4781 …}
        +votes: Doctrine\ORM\PersistentCollection {#4783 …}
        +reports: Doctrine\ORM\PersistentCollection {#4785 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4787 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4789 …}
        -id: 254610
        -bodyTs: "'afaik':12 'bit':5 'certain':21 'dont':23 'eras':32 'erasur':10 'explain':3 'key':9,19,33 'let':30 'match':24 'pcr':22 'refus':15 'releas':17 'set':28 'tpm':13 'work':11"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://mander.xyz/comment/6274855"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703602323 {#4777
          date: 2023-12-26 15:52:03.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4131}
      +body: """
        [fedoramagazine.org/automatically-decrypt-your-dis…](https://fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)\n
        \n
        I’ve read this article to make my setup, but its very informative about the function of TPM too
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 0
      +score: 0
      +lastActive: DateTime @1703625186 {#4861
        date: 2023-12-26 22:13:06.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@richardisaguy@lemmy.world"
        "@baseless_discourse@mander.xyz"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4864 …}
      +nested: Doctrine\ORM\PersistentCollection {#4866 …}
      +votes: Doctrine\ORM\PersistentCollection {#4868 …}
      +reports: Doctrine\ORM\PersistentCollection {#4870 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4872 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4874 …}
      -id: 254709
      -bodyTs: "'/automatically-decrypt-your-dis':3 '/automatically-decrypt-your-disk-using-tpm2/)':6 'articl':11 'fedoramagazine.org':2,5 'fedoramagazine.org/automatically-decrypt-your-dis':1 'fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/)':4 'function':22 'inform':19 'make':13 'read':9 'setup':15 'tpm':24 've':8"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemmy.world/comment/6253806"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703625186 {#4862
        date: 2023-12-26 22:13:06.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4131}
    +body: "I have read that article, it doesn’t seem to mention that TPM will erase key if a different OS is loaded, maybe I missed something?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1703626426 {#4945
      date: 2023-12-26 22:33:46.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@richardisaguy@lemmy.world"
      "@baseless_discourse@mander.xyz"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4948 …}
    +nested: Doctrine\ORM\PersistentCollection {#4950 …}
    +votes: Doctrine\ORM\PersistentCollection {#4952 …}
    +reports: Doctrine\ORM\PersistentCollection {#4954 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4956 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4958 …}
    -id: 254759
    -bodyTs: "'articl':5 'differ':19 'doesn':7 'eras':15 'key':16 'load':22 'mayb':23 'mention':11 'miss':25 'os':20 'read':3 'seem':9 'someth':26 'tpm':13"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://mander.xyz/comment/6281069"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703626426 {#4946
      date: 2023-12-26 22:33:46.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: "It talsk about pcr, every time another OS is booted some pcsrs are changed, and if the keys are installed on the correct ones, this will lead to it being erased"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703631965 {#5014
    date: 2023-12-27 00:06:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
    "@baseless_discourse@mander.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5017 …}
  +nested: Doctrine\ORM\PersistentCollection {#5019 …}
  +votes: Doctrine\ORM\PersistentCollection {#5021 …}
  +reports: Doctrine\ORM\PersistentCollection {#5023 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5025 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5027 …}
  -id: 254972
  -bodyTs: "'anoth':7 'boot':10 'chang':14 'correct':23 'eras':31 'everi':5 'instal':20 'key':18 'lead':27 'one':24 'os':8 'pcr':4 'pcsrs':12 'talsk':2 'time':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6255088"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703631965 {#5015
    date: 2023-12-27 00:06:05.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
33 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
34 DENIED moderate 
App\Entity\EntryComment {#4793
  +user: Proxies\__CG__\App\Entity\User {#4794 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4131
    +user: App\Entity\User {#4144 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
      \n
      Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1708143580 {#4126
      date: 2024-02-17 05:19:40.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4132 …}
    +nested: Doctrine\ORM\PersistentCollection {#4134 …}
    +votes: Doctrine\ORM\PersistentCollection {#4136 …}
    +reports: Doctrine\ORM\PersistentCollection {#4138 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
    -id: 252362
    -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6242299"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703551220 {#4127
      date: 2023-12-26 01:40:20.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: """
    > Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.\n
    \n
    There are forensic tools that can capture the contents of RAM, and so access your decrypted LUKS encryption key.\n
    \n
    I guess it depends on who you are protecting against, but if for example law enforcement wants evidence against you for what they think is a serious enough crime, they just may go through the trouble to do it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703629120 {#4791
    date: 2023-12-26 23:18:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4795 …}
  +nested: Doctrine\ORM\PersistentCollection {#4797 …}
  +votes: Doctrine\ORM\PersistentCollection {#4799 …}
  +reports: Doctrine\ORM\PersistentCollection {#4801 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4803 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4805 …}
  -id: 254855
  -bodyTs: "'access':31 'anyon':3 'besid':1 'boot':6 'captur':24 'content':26 'crime':65 'decrypt':33 'depend':40 'encrypt':35 'enforc':52 'enough':64 'eras':17 'evid':54 'exampl':50 'forens':20 'go':69 'guess':38 'key':15,36 'law':51 'luk':34 'may':68 'mine':13 'os':9 'protect':45 'ram':28 'serious':63 'think':60 'tool':21 'tri':4 'troubl':72 'want':53"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5581587"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703629120 {#4792
    date: 2023-12-26 23:18:40.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
35 DENIED edit 
App\Entity\EntryComment {#4793
  +user: Proxies\__CG__\App\Entity\User {#4794 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4131
    +user: App\Entity\User {#4144 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
      \n
      Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1708143580 {#4126
      date: 2024-02-17 05:19:40.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4132 …}
    +nested: Doctrine\ORM\PersistentCollection {#4134 …}
    +votes: Doctrine\ORM\PersistentCollection {#4136 …}
    +reports: Doctrine\ORM\PersistentCollection {#4138 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
    -id: 252362
    -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6242299"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703551220 {#4127
      date: 2023-12-26 01:40:20.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: """
    > Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.\n
    \n
    There are forensic tools that can capture the contents of RAM, and so access your decrypted LUKS encryption key.\n
    \n
    I guess it depends on who you are protecting against, but if for example law enforcement wants evidence against you for what they think is a serious enough crime, they just may go through the trouble to do it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703629120 {#4791
    date: 2023-12-26 23:18:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4795 …}
  +nested: Doctrine\ORM\PersistentCollection {#4797 …}
  +votes: Doctrine\ORM\PersistentCollection {#4799 …}
  +reports: Doctrine\ORM\PersistentCollection {#4801 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4803 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4805 …}
  -id: 254855
  -bodyTs: "'access':31 'anyon':3 'besid':1 'boot':6 'captur':24 'content':26 'crime':65 'decrypt':33 'depend':40 'encrypt':35 'enforc':52 'enough':64 'eras':17 'evid':54 'exampl':50 'forens':20 'go':69 'guess':38 'key':15,36 'law':51 'luk':34 'may':68 'mine':13 'os':9 'protect':45 'ram':28 'serious':63 'think':60 'tool':21 'tri':4 'troubl':72 'want':53"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5581587"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703629120 {#4792
    date: 2023-12-26 23:18:40.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
36 DENIED moderate 
App\Entity\EntryComment {#4793
  +user: Proxies\__CG__\App\Entity\User {#4794 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4131
    +user: App\Entity\User {#4144 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      I use it for storing luks credentials, so every time I boot I get dropped at my login manager. It leaves my system vunerable to attacks to it, but its quite convenient.\n
      \n
      Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 6
    +score: 0
    +lastActive: DateTime @1708143580 {#4126
      date: 2024-02-17 05:19:40.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4132 …}
    +nested: Doctrine\ORM\PersistentCollection {#4134 …}
    +votes: Doctrine\ORM\PersistentCollection {#4136 …}
    +reports: Doctrine\ORM\PersistentCollection {#4138 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4140 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4142 …}
    -id: 252362
    -bodyTs: "'anyon':35 'attack':26 'besid':33 'boot':12,38 'conveni':32 'credenti':7 'drop':15 'eras':49 'everi':9 'get':14 'key':47 'leav':21 'login':18 'luk':6 'manag':19 'mine':45 'os':41 'quit':31 'store':5 'system':23 'time':10 'tri':36 'use':2 'vuner':24"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6242299"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703551220 {#4127
      date: 2023-12-26 01:40:20.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4131}
  +body: """
    > Besides, if anyone tries to boot any other OS which is not mine, the keys are erased.\n
    \n
    There are forensic tools that can capture the contents of RAM, and so access your decrypted LUKS encryption key.\n
    \n
    I guess it depends on who you are protecting against, but if for example law enforcement wants evidence against you for what they think is a serious enough crime, they just may go through the trouble to do it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703629120 {#4791
    date: 2023-12-26 23:18:40.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@richardisaguy@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4795 …}
  +nested: Doctrine\ORM\PersistentCollection {#4797 …}
  +votes: Doctrine\ORM\PersistentCollection {#4799 …}
  +reports: Doctrine\ORM\PersistentCollection {#4801 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4803 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4805 …}
  -id: 254855
  -bodyTs: "'access':31 'anyon':3 'besid':1 'boot':6 'captur':24 'content':26 'crime':65 'decrypt':33 'depend':40 'encrypt':35 'enforc':52 'enough':64 'eras':17 'evid':54 'exampl':50 'forens':20 'go':69 'guess':38 'key':15,36 'law':51 'luk':34 'may':68 'mine':13 'os':9 'protect':45 'ram':28 'serious':63 'think':60 'tool':21 'tri':4 'troubl':72 'want':53"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5581587"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703629120 {#4792
    date: 2023-12-26 23:18:40.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
37 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
38 DENIED moderate 
App\Entity\EntryComment {#4205
  +user: App\Entity\User {#4218 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
    \n
    I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
    \n
    I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
    \n
    Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 46
  +score: 0
  +lastActive: DateTime @1710417485 {#4200
    date: 2024-03-14 12:58:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4206 …}
  +nested: Doctrine\ORM\PersistentCollection {#4208 …}
  +votes: Doctrine\ORM\PersistentCollection {#4210 …}
  +reports: Doctrine\ORM\PersistentCollection {#4212 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
  -id: 252174
  -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://pawb.social/comment/4918875"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703545288 {#4201
    date: 2023-12-26 00:01:28.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
39 DENIED edit 
App\Entity\EntryComment {#4205
  +user: App\Entity\User {#4218 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
    \n
    I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
    \n
    I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
    \n
    Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 46
  +score: 0
  +lastActive: DateTime @1710417485 {#4200
    date: 2024-03-14 12:58:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4206 …}
  +nested: Doctrine\ORM\PersistentCollection {#4208 …}
  +votes: Doctrine\ORM\PersistentCollection {#4210 …}
  +reports: Doctrine\ORM\PersistentCollection {#4212 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
  -id: 252174
  -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://pawb.social/comment/4918875"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703545288 {#4201
    date: 2023-12-26 00:01:28.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
40 DENIED moderate 
App\Entity\EntryComment {#4205
  +user: App\Entity\User {#4218 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
    \n
    I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
    \n
    I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
    \n
    Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 46
  +score: 0
  +lastActive: DateTime @1710417485 {#4200
    date: 2024-03-14 12:58:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4206 …}
  +nested: Doctrine\ORM\PersistentCollection {#4208 …}
  +votes: Doctrine\ORM\PersistentCollection {#4210 …}
  +reports: Doctrine\ORM\PersistentCollection {#4212 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
  -id: 252174
  -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://pawb.social/comment/4918875"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703545288 {#4201
    date: 2023-12-26 00:01:28.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
41 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
42 DENIED moderate 
App\Entity\EntryComment {#4746
  +user: Proxies\__CG__\App\Entity\User {#4747 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4205
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
      \n
      I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
      \n
      I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
      \n
      Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 46
    +score: 0
    +lastActive: DateTime @1710417485 {#4200
      date: 2024-03-14 12:58:05.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4206 …}
    +nested: Doctrine\ORM\PersistentCollection {#4208 …}
    +votes: Doctrine\ORM\PersistentCollection {#4210 …}
    +reports: Doctrine\ORM\PersistentCollection {#4212 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
    -id: 252174
    -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4918875"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703545288 {#4201
      date: 2023-12-26 00:01:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 15
  +score: 0
  +lastActive: DateTime @1703548351 {#4744
    date: 2023-12-26 00:52:31.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4748 …}
  +nested: Doctrine\ORM\PersistentCollection {#4750 …}
  +votes: Doctrine\ORM\PersistentCollection {#4752 …}
  +reports: Doctrine\ORM\PersistentCollection {#4754 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
  -id: 252288
  -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/6839200"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703548351 {#4745
    date: 2023-12-26 00:52:31.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
43 DENIED edit 
App\Entity\EntryComment {#4746
  +user: Proxies\__CG__\App\Entity\User {#4747 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4205
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
      \n
      I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
      \n
      I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
      \n
      Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 46
    +score: 0
    +lastActive: DateTime @1710417485 {#4200
      date: 2024-03-14 12:58:05.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4206 …}
    +nested: Doctrine\ORM\PersistentCollection {#4208 …}
    +votes: Doctrine\ORM\PersistentCollection {#4210 …}
    +reports: Doctrine\ORM\PersistentCollection {#4212 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
    -id: 252174
    -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4918875"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703545288 {#4201
      date: 2023-12-26 00:01:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 15
  +score: 0
  +lastActive: DateTime @1703548351 {#4744
    date: 2023-12-26 00:52:31.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4748 …}
  +nested: Doctrine\ORM\PersistentCollection {#4750 …}
  +votes: Doctrine\ORM\PersistentCollection {#4752 …}
  +reports: Doctrine\ORM\PersistentCollection {#4754 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
  -id: 252288
  -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/6839200"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703548351 {#4745
    date: 2023-12-26 00:52:31.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
44 DENIED moderate 
App\Entity\EntryComment {#4746
  +user: Proxies\__CG__\App\Entity\User {#4747 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4205
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
      \n
      I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
      \n
      I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
      \n
      Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 46
    +score: 0
    +lastActive: DateTime @1710417485 {#4200
      date: 2024-03-14 12:58:05.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4206 …}
    +nested: Doctrine\ORM\PersistentCollection {#4208 …}
    +votes: Doctrine\ORM\PersistentCollection {#4210 …}
    +reports: Doctrine\ORM\PersistentCollection {#4212 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
    -id: 252174
    -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4918875"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703545288 {#4201
      date: 2023-12-26 00:01:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 15
  +score: 0
  +lastActive: DateTime @1703548351 {#4744
    date: 2023-12-26 00:52:31.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4748 …}
  +nested: Doctrine\ORM\PersistentCollection {#4750 …}
  +votes: Doctrine\ORM\PersistentCollection {#4752 …}
  +reports: Doctrine\ORM\PersistentCollection {#4754 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
  -id: 252288
  -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/6839200"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703548351 {#4745
    date: 2023-12-26 00:52:31.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
45 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
46 DENIED moderate 
App\Entity\EntryComment {#4851
  +user: App\Entity\User {#4218 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4746
    +user: Proxies\__CG__\App\Entity\User {#4747 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4205
      +user: App\Entity\User {#4218 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
        \n
        I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
        \n
        I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
        \n
        Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 46
      +score: 0
      +lastActive: DateTime @1710417485 {#4200
        date: 2024-03-14 12:58:05.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4206 …}
      +nested: Doctrine\ORM\PersistentCollection {#4208 …}
      +votes: Doctrine\ORM\PersistentCollection {#4210 …}
      +reports: Doctrine\ORM\PersistentCollection {#4212 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
      -id: 252174
      -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://pawb.social/comment/4918875"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703545288 {#4201
        date: 2023-12-26 00:01:28.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 15
    +score: 0
    +lastActive: DateTime @1703548351 {#4744
      date: 2023-12-26 00:52:31.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4748 …}
    +nested: Doctrine\ORM\PersistentCollection {#4750 …}
    +votes: Doctrine\ORM\PersistentCollection {#4752 …}
    +reports: Doctrine\ORM\PersistentCollection {#4754 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
    -id: 252288
    -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/6839200"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703548351 {#4745
      date: 2023-12-26 00:52:31.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    I’ve heard that before, but there are two main problems that stick out to me:\n
    \n
    - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
    - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
    \n
    I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1703552012 {#4852
    date: 2023-12-26 01:53:32.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4846 …}
  +nested: Doctrine\ORM\PersistentCollection {#4840 …}
  +votes: Doctrine\ORM\PersistentCollection {#4844 …}
  +reports: Doctrine\ORM\PersistentCollection {#4855 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
  -id: 252387
  -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://pawb.social/comment/4919933"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703552012 {#4849
    date: 2023-12-26 01:53:32.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
47 DENIED edit 
App\Entity\EntryComment {#4851
  +user: App\Entity\User {#4218 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4746
    +user: Proxies\__CG__\App\Entity\User {#4747 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4205
      +user: App\Entity\User {#4218 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
        \n
        I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
        \n
        I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
        \n
        Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 46
      +score: 0
      +lastActive: DateTime @1710417485 {#4200
        date: 2024-03-14 12:58:05.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4206 …}
      +nested: Doctrine\ORM\PersistentCollection {#4208 …}
      +votes: Doctrine\ORM\PersistentCollection {#4210 …}
      +reports: Doctrine\ORM\PersistentCollection {#4212 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
      -id: 252174
      -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://pawb.social/comment/4918875"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703545288 {#4201
        date: 2023-12-26 00:01:28.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 15
    +score: 0
    +lastActive: DateTime @1703548351 {#4744
      date: 2023-12-26 00:52:31.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4748 …}
    +nested: Doctrine\ORM\PersistentCollection {#4750 …}
    +votes: Doctrine\ORM\PersistentCollection {#4752 …}
    +reports: Doctrine\ORM\PersistentCollection {#4754 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
    -id: 252288
    -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/6839200"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703548351 {#4745
      date: 2023-12-26 00:52:31.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    I’ve heard that before, but there are two main problems that stick out to me:\n
    \n
    - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
    - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
    \n
    I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1703552012 {#4852
    date: 2023-12-26 01:53:32.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4846 …}
  +nested: Doctrine\ORM\PersistentCollection {#4840 …}
  +votes: Doctrine\ORM\PersistentCollection {#4844 …}
  +reports: Doctrine\ORM\PersistentCollection {#4855 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
  -id: 252387
  -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://pawb.social/comment/4919933"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703552012 {#4849
    date: 2023-12-26 01:53:32.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
48 DENIED moderate 
App\Entity\EntryComment {#4851
  +user: App\Entity\User {#4218 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4746
    +user: Proxies\__CG__\App\Entity\User {#4747 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4205
      +user: App\Entity\User {#4218 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: """
        Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
        \n
        I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
        \n
        I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
        \n
        Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 46
      +score: 0
      +lastActive: DateTime @1710417485 {#4200
        date: 2024-03-14 12:58:05.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4206 …}
      +nested: Doctrine\ORM\PersistentCollection {#4208 …}
      +votes: Doctrine\ORM\PersistentCollection {#4210 …}
      +reports: Doctrine\ORM\PersistentCollection {#4212 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
      -id: 252174
      -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://pawb.social/comment/4918875"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703545288 {#4201
        date: 2023-12-26 00:01:28.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 15
    +score: 0
    +lastActive: DateTime @1703548351 {#4744
      date: 2023-12-26 00:52:31.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4748 …}
    +nested: Doctrine\ORM\PersistentCollection {#4750 …}
    +votes: Doctrine\ORM\PersistentCollection {#4752 …}
    +reports: Doctrine\ORM\PersistentCollection {#4754 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
    -id: 252288
    -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/6839200"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703548351 {#4745
      date: 2023-12-26 00:52:31.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    I’ve heard that before, but there are two main problems that stick out to me:\n
    \n
    - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
    - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
    \n
    I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1703552012 {#4852
    date: 2023-12-26 01:53:32.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4846 …}
  +nested: Doctrine\ORM\PersistentCollection {#4840 …}
  +votes: Doctrine\ORM\PersistentCollection {#4844 …}
  +reports: Doctrine\ORM\PersistentCollection {#4855 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
  -id: 252387
  -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://pawb.social/comment/4919933"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703552012 {#4849
    date: 2023-12-26 01:53:32.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
49 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
50 DENIED moderate 
App\Entity\EntryComment {#4901
  +user: Proxies\__CG__\App\Entity\User {#4898 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4851
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4746
      +user: Proxies\__CG__\App\Entity\User {#4747 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4205
        +user: App\Entity\User {#4218 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: """
          Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
          \n
          I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
          \n
          I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
          \n
          Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 46
        +score: 0
        +lastActive: DateTime @1710417485 {#4200
          date: 2024-03-14 12:58:05.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4206 …}
        +nested: Doctrine\ORM\PersistentCollection {#4208 …}
        +votes: Doctrine\ORM\PersistentCollection {#4210 …}
        +reports: Doctrine\ORM\PersistentCollection {#4212 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
        -id: 252174
        -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://pawb.social/comment/4918875"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703545288 {#4201
          date: 2023-12-26 00:01:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 15
      +score: 0
      +lastActive: DateTime @1703548351 {#4744
        date: 2023-12-26 00:52:31.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4748 …}
      +nested: Doctrine\ORM\PersistentCollection {#4750 …}
      +votes: Doctrine\ORM\PersistentCollection {#4752 …}
      +reports: Doctrine\ORM\PersistentCollection {#4754 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
      -id: 252288
      -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/6839200"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703548351 {#4745
        date: 2023-12-26 00:52:31.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: """
      I’ve heard that before, but there are two main problems that stick out to me:\n
      \n
      - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
      - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
      \n
      I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 11
    +score: 0
    +lastActive: DateTime @1703552012 {#4852
      date: 2023-12-26 01:53:32.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4846 …}
    +nested: Doctrine\ORM\PersistentCollection {#4840 …}
    +votes: Doctrine\ORM\PersistentCollection {#4844 …}
    +reports: Doctrine\ORM\PersistentCollection {#4855 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
    -id: 252387
    -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4919933"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703552012 {#4849
      date: 2023-12-26 01:53:32.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: "The bootloader is stored unencrypted on your disk. Therefore it is trivial to modify, the other person just needs to power down your PC, take the hard drive out, mount it on their own PC and modify stuff. This is the Evil Maid attack the other person talked about."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 9
  +score: 0
  +lastActive: DateTime @1703587828 {#4902
    date: 2023-12-26 11:50:28.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4895 …}
  +nested: Doctrine\ORM\PersistentCollection {#4893 …}
  +votes: Doctrine\ORM\PersistentCollection {#4897 …}
  +reports: Doctrine\ORM\PersistentCollection {#4908 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4910 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4912 …}
  -id: 253287
  -bodyTs: "'attack':44 'bootload':2 'disk':8 'drive':28 'evil':42 'hard':27 'maid':43 'modifi':14,37 'mount':30 'need':19 'pc':24,35 'person':17,47 'power':21 'store':4 'stuff':38 'take':25 'talk':48 'therefor':9 'trivial':12 'unencrypt':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/6846967"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703587828 {#4905
    date: 2023-12-26 11:50:28.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
51 DENIED edit 
App\Entity\EntryComment {#4901
  +user: Proxies\__CG__\App\Entity\User {#4898 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4851
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4746
      +user: Proxies\__CG__\App\Entity\User {#4747 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4205
        +user: App\Entity\User {#4218 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: """
          Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
          \n
          I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
          \n
          I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
          \n
          Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 46
        +score: 0
        +lastActive: DateTime @1710417485 {#4200
          date: 2024-03-14 12:58:05.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4206 …}
        +nested: Doctrine\ORM\PersistentCollection {#4208 …}
        +votes: Doctrine\ORM\PersistentCollection {#4210 …}
        +reports: Doctrine\ORM\PersistentCollection {#4212 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
        -id: 252174
        -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://pawb.social/comment/4918875"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703545288 {#4201
          date: 2023-12-26 00:01:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 15
      +score: 0
      +lastActive: DateTime @1703548351 {#4744
        date: 2023-12-26 00:52:31.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4748 …}
      +nested: Doctrine\ORM\PersistentCollection {#4750 …}
      +votes: Doctrine\ORM\PersistentCollection {#4752 …}
      +reports: Doctrine\ORM\PersistentCollection {#4754 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
      -id: 252288
      -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/6839200"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703548351 {#4745
        date: 2023-12-26 00:52:31.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: """
      I’ve heard that before, but there are two main problems that stick out to me:\n
      \n
      - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
      - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
      \n
      I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 11
    +score: 0
    +lastActive: DateTime @1703552012 {#4852
      date: 2023-12-26 01:53:32.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4846 …}
    +nested: Doctrine\ORM\PersistentCollection {#4840 …}
    +votes: Doctrine\ORM\PersistentCollection {#4844 …}
    +reports: Doctrine\ORM\PersistentCollection {#4855 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
    -id: 252387
    -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4919933"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703552012 {#4849
      date: 2023-12-26 01:53:32.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: "The bootloader is stored unencrypted on your disk. Therefore it is trivial to modify, the other person just needs to power down your PC, take the hard drive out, mount it on their own PC and modify stuff. This is the Evil Maid attack the other person talked about."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 9
  +score: 0
  +lastActive: DateTime @1703587828 {#4902
    date: 2023-12-26 11:50:28.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4895 …}
  +nested: Doctrine\ORM\PersistentCollection {#4893 …}
  +votes: Doctrine\ORM\PersistentCollection {#4897 …}
  +reports: Doctrine\ORM\PersistentCollection {#4908 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4910 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4912 …}
  -id: 253287
  -bodyTs: "'attack':44 'bootload':2 'disk':8 'drive':28 'evil':42 'hard':27 'maid':43 'modifi':14,37 'mount':30 'need':19 'pc':24,35 'person':17,47 'power':21 'store':4 'stuff':38 'take':25 'talk':48 'therefor':9 'trivial':12 'unencrypt':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/6846967"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703587828 {#4905
    date: 2023-12-26 11:50:28.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
52 DENIED moderate 
App\Entity\EntryComment {#4901
  +user: Proxies\__CG__\App\Entity\User {#4898 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4851
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4746
      +user: Proxies\__CG__\App\Entity\User {#4747 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4205
        +user: App\Entity\User {#4218 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: """
          Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
          \n
          I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
          \n
          I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
          \n
          Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 46
        +score: 0
        +lastActive: DateTime @1710417485 {#4200
          date: 2024-03-14 12:58:05.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4206 …}
        +nested: Doctrine\ORM\PersistentCollection {#4208 …}
        +votes: Doctrine\ORM\PersistentCollection {#4210 …}
        +reports: Doctrine\ORM\PersistentCollection {#4212 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
        -id: 252174
        -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://pawb.social/comment/4918875"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703545288 {#4201
          date: 2023-12-26 00:01:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 15
      +score: 0
      +lastActive: DateTime @1703548351 {#4744
        date: 2023-12-26 00:52:31.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4748 …}
      +nested: Doctrine\ORM\PersistentCollection {#4750 …}
      +votes: Doctrine\ORM\PersistentCollection {#4752 …}
      +reports: Doctrine\ORM\PersistentCollection {#4754 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
      -id: 252288
      -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/6839200"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703548351 {#4745
        date: 2023-12-26 00:52:31.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: """
      I’ve heard that before, but there are two main problems that stick out to me:\n
      \n
      - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
      - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
      \n
      I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 11
    +score: 0
    +lastActive: DateTime @1703552012 {#4852
      date: 2023-12-26 01:53:32.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4846 …}
    +nested: Doctrine\ORM\PersistentCollection {#4840 …}
    +votes: Doctrine\ORM\PersistentCollection {#4844 …}
    +reports: Doctrine\ORM\PersistentCollection {#4855 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
    -id: 252387
    -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4919933"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703552012 {#4849
      date: 2023-12-26 01:53:32.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: "The bootloader is stored unencrypted on your disk. Therefore it is trivial to modify, the other person just needs to power down your PC, take the hard drive out, mount it on their own PC and modify stuff. This is the Evil Maid attack the other person talked about."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 9
  +score: 0
  +lastActive: DateTime @1703587828 {#4902
    date: 2023-12-26 11:50:28.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4895 …}
  +nested: Doctrine\ORM\PersistentCollection {#4893 …}
  +votes: Doctrine\ORM\PersistentCollection {#4897 …}
  +reports: Doctrine\ORM\PersistentCollection {#4908 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4910 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4912 …}
  -id: 253287
  -bodyTs: "'attack':44 'bootload':2 'disk':8 'drive':28 'evil':42 'hard':27 'maid':43 'modifi':14,37 'mount':30 'need':19 'pc':24,35 'person':17,47 'power':21 'store':4 'stuff':38 'take':25 'talk':48 'therefor':9 'trivial':12 'unencrypt':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/6846967"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703587828 {#4905
    date: 2023-12-26 11:50:28.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
53 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
54 DENIED moderate 
App\Entity\EntryComment {#4966
  +user: App\Entity\User {#4218 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4901
    +user: Proxies\__CG__\App\Entity\User {#4898 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4851
      +user: App\Entity\User {#4218 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4746
        +user: Proxies\__CG__\App\Entity\User {#4747 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4205
          +user: App\Entity\User {#4218 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: null
          +root: null
          +body: """
            Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
            \n
            I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
            \n
            I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
            \n
            Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 46
          +score: 0
          +lastActive: DateTime @1710417485 {#4200
            date: 2024-03-14 12:58:05.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4206 …}
          +nested: Doctrine\ORM\PersistentCollection {#4208 …}
          +votes: Doctrine\ORM\PersistentCollection {#4210 …}
          +reports: Doctrine\ORM\PersistentCollection {#4212 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
          -id: 252174
          -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://pawb.social/comment/4918875"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703545288 {#4201
            date: 2023-12-26 00:01:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4205}
        +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 15
        +score: 0
        +lastActive: DateTime @1703548351 {#4744
          date: 2023-12-26 00:52:31.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@savvywolf@pawb.social"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4748 …}
        +nested: Doctrine\ORM\PersistentCollection {#4750 …}
        +votes: Doctrine\ORM\PersistentCollection {#4752 …}
        +reports: Doctrine\ORM\PersistentCollection {#4754 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
        -id: 252288
        -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://sh.itjust.works/comment/6839200"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703548351 {#4745
          date: 2023-12-26 00:52:31.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: """
        I’ve heard that before, but there are two main problems that stick out to me:\n
        \n
        - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
        - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
        \n
        I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 11
      +score: 0
      +lastActive: DateTime @1703552012 {#4852
        date: 2023-12-26 01:53:32.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
        "@wildbus8979@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4846 …}
      +nested: Doctrine\ORM\PersistentCollection {#4840 …}
      +votes: Doctrine\ORM\PersistentCollection {#4844 …}
      +reports: Doctrine\ORM\PersistentCollection {#4855 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
      -id: 252387
      -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://pawb.social/comment/4919933"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703552012 {#4849
        date: 2023-12-26 01:53:32.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: "The bootloader is stored unencrypted on your disk. Therefore it is trivial to modify, the other person just needs to power down your PC, take the hard drive out, mount it on their own PC and modify stuff. This is the Evil Maid attack the other person talked about."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 9
    +score: 0
    +lastActive: DateTime @1703587828 {#4902
      date: 2023-12-26 11:50:28.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4895 …}
    +nested: Doctrine\ORM\PersistentCollection {#4893 …}
    +votes: Doctrine\ORM\PersistentCollection {#4897 …}
    +reports: Doctrine\ORM\PersistentCollection {#4908 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4910 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4912 …}
    -id: 253287
    -bodyTs: "'attack':44 'bootload':2 'disk':8 'drive':28 'evil':42 'hard':27 'maid':43 'modifi':14,37 'mount':30 'need':19 'pc':24,35 'person':17,47 'power':21 'store':4 'stuff':38 'take':25 'talk':48 'therefor':9 'trivial':12 'unencrypt':5"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/6846967"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703587828 {#4905
      date: 2023-12-26 11:50:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: "I can’t see that being a reasonable approach for them to take, tbh. One option with TPM is that your system logs in automatically to the desktop, in which case they can just turn it on and use it normally. The other is that it requires a password at some point during startup, to which they could just use a (hardware) keylogger."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1703591850 {#4965
    date: 2023-12-26 12:57:30.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@metiulekm@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4969 …}
  +nested: Doctrine\ORM\PersistentCollection {#4974 …}
  +votes: Doctrine\ORM\PersistentCollection {#4970 …}
  +reports: Doctrine\ORM\PersistentCollection {#4976 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4978 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4980 …}
  -id: 253384
  -bodyTs: "'approach':9 'automat':25 'case':31 'could':58 'desktop':28 'hardwar':62 'keylogg':63 'log':23 'normal':41 'one':15 'option':16 'password':49 'point':52 'reason':8 'requir':47 'see':4 'startup':54 'system':22 'take':13 'tbh':14 'tpm':18 'turn':35 'use':39,60"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://pawb.social/comment/4925017"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703591850 {#4962
    date: 2023-12-26 12:57:30.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
55 DENIED edit 
App\Entity\EntryComment {#4966
  +user: App\Entity\User {#4218 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4901
    +user: Proxies\__CG__\App\Entity\User {#4898 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4851
      +user: App\Entity\User {#4218 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4746
        +user: Proxies\__CG__\App\Entity\User {#4747 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4205
          +user: App\Entity\User {#4218 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: null
          +root: null
          +body: """
            Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
            \n
            I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
            \n
            I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
            \n
            Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 46
          +score: 0
          +lastActive: DateTime @1710417485 {#4200
            date: 2024-03-14 12:58:05.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4206 …}
          +nested: Doctrine\ORM\PersistentCollection {#4208 …}
          +votes: Doctrine\ORM\PersistentCollection {#4210 …}
          +reports: Doctrine\ORM\PersistentCollection {#4212 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
          -id: 252174
          -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://pawb.social/comment/4918875"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703545288 {#4201
            date: 2023-12-26 00:01:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4205}
        +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 15
        +score: 0
        +lastActive: DateTime @1703548351 {#4744
          date: 2023-12-26 00:52:31.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@savvywolf@pawb.social"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4748 …}
        +nested: Doctrine\ORM\PersistentCollection {#4750 …}
        +votes: Doctrine\ORM\PersistentCollection {#4752 …}
        +reports: Doctrine\ORM\PersistentCollection {#4754 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
        -id: 252288
        -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://sh.itjust.works/comment/6839200"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703548351 {#4745
          date: 2023-12-26 00:52:31.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: """
        I’ve heard that before, but there are two main problems that stick out to me:\n
        \n
        - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
        - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
        \n
        I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 11
      +score: 0
      +lastActive: DateTime @1703552012 {#4852
        date: 2023-12-26 01:53:32.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
        "@wildbus8979@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4846 …}
      +nested: Doctrine\ORM\PersistentCollection {#4840 …}
      +votes: Doctrine\ORM\PersistentCollection {#4844 …}
      +reports: Doctrine\ORM\PersistentCollection {#4855 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
      -id: 252387
      -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://pawb.social/comment/4919933"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703552012 {#4849
        date: 2023-12-26 01:53:32.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: "The bootloader is stored unencrypted on your disk. Therefore it is trivial to modify, the other person just needs to power down your PC, take the hard drive out, mount it on their own PC and modify stuff. This is the Evil Maid attack the other person talked about."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 9
    +score: 0
    +lastActive: DateTime @1703587828 {#4902
      date: 2023-12-26 11:50:28.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4895 …}
    +nested: Doctrine\ORM\PersistentCollection {#4893 …}
    +votes: Doctrine\ORM\PersistentCollection {#4897 …}
    +reports: Doctrine\ORM\PersistentCollection {#4908 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4910 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4912 …}
    -id: 253287
    -bodyTs: "'attack':44 'bootload':2 'disk':8 'drive':28 'evil':42 'hard':27 'maid':43 'modifi':14,37 'mount':30 'need':19 'pc':24,35 'person':17,47 'power':21 'store':4 'stuff':38 'take':25 'talk':48 'therefor':9 'trivial':12 'unencrypt':5"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/6846967"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703587828 {#4905
      date: 2023-12-26 11:50:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: "I can’t see that being a reasonable approach for them to take, tbh. One option with TPM is that your system logs in automatically to the desktop, in which case they can just turn it on and use it normally. The other is that it requires a password at some point during startup, to which they could just use a (hardware) keylogger."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1703591850 {#4965
    date: 2023-12-26 12:57:30.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@metiulekm@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4969 …}
  +nested: Doctrine\ORM\PersistentCollection {#4974 …}
  +votes: Doctrine\ORM\PersistentCollection {#4970 …}
  +reports: Doctrine\ORM\PersistentCollection {#4976 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4978 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4980 …}
  -id: 253384
  -bodyTs: "'approach':9 'automat':25 'case':31 'could':58 'desktop':28 'hardwar':62 'keylogg':63 'log':23 'normal':41 'one':15 'option':16 'password':49 'point':52 'reason':8 'requir':47 'see':4 'startup':54 'system':22 'take':13 'tbh':14 'tpm':18 'turn':35 'use':39,60"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://pawb.social/comment/4925017"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703591850 {#4962
    date: 2023-12-26 12:57:30.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
56 DENIED moderate 
App\Entity\EntryComment {#4966
  +user: App\Entity\User {#4218 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4901
    +user: Proxies\__CG__\App\Entity\User {#4898 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4851
      +user: App\Entity\User {#4218 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4746
        +user: Proxies\__CG__\App\Entity\User {#4747 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4205
          +user: App\Entity\User {#4218 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: null
          +root: null
          +body: """
            Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
            \n
            I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
            \n
            I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
            \n
            Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 46
          +score: 0
          +lastActive: DateTime @1710417485 {#4200
            date: 2024-03-14 12:58:05.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4206 …}
          +nested: Doctrine\ORM\PersistentCollection {#4208 …}
          +votes: Doctrine\ORM\PersistentCollection {#4210 …}
          +reports: Doctrine\ORM\PersistentCollection {#4212 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
          -id: 252174
          -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://pawb.social/comment/4918875"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703545288 {#4201
            date: 2023-12-26 00:01:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4205}
        +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 15
        +score: 0
        +lastActive: DateTime @1703548351 {#4744
          date: 2023-12-26 00:52:31.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@savvywolf@pawb.social"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4748 …}
        +nested: Doctrine\ORM\PersistentCollection {#4750 …}
        +votes: Doctrine\ORM\PersistentCollection {#4752 …}
        +reports: Doctrine\ORM\PersistentCollection {#4754 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
        -id: 252288
        -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://sh.itjust.works/comment/6839200"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703548351 {#4745
          date: 2023-12-26 00:52:31.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: """
        I’ve heard that before, but there are two main problems that stick out to me:\n
        \n
        - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
        - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
        \n
        I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 11
      +score: 0
      +lastActive: DateTime @1703552012 {#4852
        date: 2023-12-26 01:53:32.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
        "@wildbus8979@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4846 …}
      +nested: Doctrine\ORM\PersistentCollection {#4840 …}
      +votes: Doctrine\ORM\PersistentCollection {#4844 …}
      +reports: Doctrine\ORM\PersistentCollection {#4855 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
      -id: 252387
      -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://pawb.social/comment/4919933"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703552012 {#4849
        date: 2023-12-26 01:53:32.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: "The bootloader is stored unencrypted on your disk. Therefore it is trivial to modify, the other person just needs to power down your PC, take the hard drive out, mount it on their own PC and modify stuff. This is the Evil Maid attack the other person talked about."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 9
    +score: 0
    +lastActive: DateTime @1703587828 {#4902
      date: 2023-12-26 11:50:28.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4895 …}
    +nested: Doctrine\ORM\PersistentCollection {#4893 …}
    +votes: Doctrine\ORM\PersistentCollection {#4897 …}
    +reports: Doctrine\ORM\PersistentCollection {#4908 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4910 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4912 …}
    -id: 253287
    -bodyTs: "'attack':44 'bootload':2 'disk':8 'drive':28 'evil':42 'hard':27 'maid':43 'modifi':14,37 'mount':30 'need':19 'pc':24,35 'person':17,47 'power':21 'store':4 'stuff':38 'take':25 'talk':48 'therefor':9 'trivial':12 'unencrypt':5"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/6846967"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703587828 {#4905
      date: 2023-12-26 11:50:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: "I can’t see that being a reasonable approach for them to take, tbh. One option with TPM is that your system logs in automatically to the desktop, in which case they can just turn it on and use it normally. The other is that it requires a password at some point during startup, to which they could just use a (hardware) keylogger."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1703591850 {#4965
    date: 2023-12-26 12:57:30.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@metiulekm@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4969 …}
  +nested: Doctrine\ORM\PersistentCollection {#4974 …}
  +votes: Doctrine\ORM\PersistentCollection {#4970 …}
  +reports: Doctrine\ORM\PersistentCollection {#4976 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4978 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4980 …}
  -id: 253384
  -bodyTs: "'approach':9 'automat':25 'case':31 'could':58 'desktop':28 'hardwar':62 'keylogg':63 'log':23 'normal':41 'one':15 'option':16 'password':49 'point':52 'reason':8 'requir':47 'see':4 'startup':54 'system':22 'take':13 'tbh':14 'tpm':18 'turn':35 'use':39,60"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://pawb.social/comment/4925017"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703591850 {#4962
    date: 2023-12-26 12:57:30.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
57 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
58 DENIED moderate 
App\Entity\EntryComment {#5035
  +user: Proxies\__CG__\App\Entity\User {#4730 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4966
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4901
      +user: Proxies\__CG__\App\Entity\User {#4898 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4851
        +user: App\Entity\User {#4218 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4746
          +user: Proxies\__CG__\App\Entity\User {#4747 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: App\Entity\EntryComment {#4205
            +user: App\Entity\User {#4218 …}
            +entry: App\Entity\Entry {#2412}
            +magazine: App\Entity\Magazine {#264}
            +image: null
            +parent: null
            +root: null
            +body: """
              Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
              \n
              I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
              \n
              I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
              \n
              Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
              """
            +lang: "en"
            +isAdult: false
            +favouriteCount: 46
            +score: 0
            +lastActive: DateTime @1710417485 {#4200
              date: 2024-03-14 12:58:05.0 +01:00
            }
            +ip: null
            +tags: null
            +mentions: [
              "@j4k3@lemmy.world"
            ]
            +children: Doctrine\ORM\PersistentCollection {#4206 …}
            +nested: Doctrine\ORM\PersistentCollection {#4208 …}
            +votes: Doctrine\ORM\PersistentCollection {#4210 …}
            +reports: Doctrine\ORM\PersistentCollection {#4212 …}
            +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
            +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
            -id: 252174
            -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
            +ranking: 0
            +commentCount: 0
            +upVotes: 0
            +downVotes: 0
            +visibility: "visible             "
            +apId: "https://pawb.social/comment/4918875"
            +editedAt: null
            +createdAt: DateTimeImmutable @1703545288 {#4201
              date: 2023-12-26 00:01:28.0 +01:00
            }
          }
          +root: App\Entity\EntryComment {#4205}
          +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
          +lang: "en"
          +isAdult: false
          +favouriteCount: 15
          +score: 0
          +lastActive: DateTime @1703548351 {#4744
            date: 2023-12-26 00:52:31.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
            "@savvywolf@pawb.social"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4748 …}
          +nested: Doctrine\ORM\PersistentCollection {#4750 …}
          +votes: Doctrine\ORM\PersistentCollection {#4752 …}
          +reports: Doctrine\ORM\PersistentCollection {#4754 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
          -id: 252288
          -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://sh.itjust.works/comment/6839200"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703548351 {#4745
            date: 2023-12-26 00:52:31.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4205}
        +body: """
          I’ve heard that before, but there are two main problems that stick out to me:\n
          \n
          - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
          - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
          \n
          I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 11
        +score: 0
        +lastActive: DateTime @1703552012 {#4852
          date: 2023-12-26 01:53:32.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@savvywolf@pawb.social"
          "@wildbus8979@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4846 …}
        +nested: Doctrine\ORM\PersistentCollection {#4840 …}
        +votes: Doctrine\ORM\PersistentCollection {#4844 …}
        +reports: Doctrine\ORM\PersistentCollection {#4855 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
        -id: 252387
        -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://pawb.social/comment/4919933"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703552012 {#4849
          date: 2023-12-26 01:53:32.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: "The bootloader is stored unencrypted on your disk. Therefore it is trivial to modify, the other person just needs to power down your PC, take the hard drive out, mount it on their own PC and modify stuff. This is the Evil Maid attack the other person talked about."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 9
      +score: 0
      +lastActive: DateTime @1703587828 {#4902
        date: 2023-12-26 11:50:28.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
        "@wildbus8979@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4895 …}
      +nested: Doctrine\ORM\PersistentCollection {#4893 …}
      +votes: Doctrine\ORM\PersistentCollection {#4897 …}
      +reports: Doctrine\ORM\PersistentCollection {#4908 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4910 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4912 …}
      -id: 253287
      -bodyTs: "'attack':44 'bootload':2 'disk':8 'drive':28 'evil':42 'hard':27 'maid':43 'modifi':14,37 'mount':30 'need':19 'pc':24,35 'person':17,47 'power':21 'store':4 'stuff':38 'take':25 'talk':48 'therefor':9 'trivial':12 'unencrypt':5"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/6846967"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703587828 {#4905
        date: 2023-12-26 11:50:28.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: "I can’t see that being a reasonable approach for them to take, tbh. One option with TPM is that your system logs in automatically to the desktop, in which case they can just turn it on and use it normally. The other is that it requires a password at some point during startup, to which they could just use a (hardware) keylogger."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 2
    +score: 0
    +lastActive: DateTime @1703591850 {#4965
      date: 2023-12-26 12:57:30.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
      "@metiulekm@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4969 …}
    +nested: Doctrine\ORM\PersistentCollection {#4974 …}
    +votes: Doctrine\ORM\PersistentCollection {#4970 …}
    +reports: Doctrine\ORM\PersistentCollection {#4976 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4978 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4980 …}
    -id: 253384
    -bodyTs: "'approach':9 'automat':25 'case':31 'could':58 'desktop':28 'hardwar':62 'keylogg':63 'log':23 'normal':41 'one':15 'option':16 'password':49 'point':52 'reason':8 'requir':47 'see':4 'startup':54 'system':22 'take':13 'tbh':14 'tpm':18 'turn':35 'use':39,60"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4925017"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703591850 {#4962
      date: 2023-12-26 12:57:30.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: "It only at most auto logs you into the display manager or more generally into login. Then you still need to get root access to modify anything from there. Login would still be based on user password/key/whatever."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1703598410 {#5034
    date: 2023-12-26 14:46:50.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@metiulekm@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5038 …}
  +nested: Doctrine\ORM\PersistentCollection {#5043 …}
  +votes: Doctrine\ORM\PersistentCollection {#5039 …}
  +reports: Doctrine\ORM\PersistentCollection {#5045 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5047 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5049 …}
  -id: 254207
  -bodyTs: "'access':24 'anyth':27 'auto':5 'base':34 'display':10 'general':14 'get':22 'log':6 'login':16,30 'manag':11 'modifi':26 'need':20 'password/key/whatever':37 'root':23 'still':19,32 'user':36 'would':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5950853"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703598410 {#5031
    date: 2023-12-26 14:46:50.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
59 DENIED edit 
App\Entity\EntryComment {#5035
  +user: Proxies\__CG__\App\Entity\User {#4730 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4966
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4901
      +user: Proxies\__CG__\App\Entity\User {#4898 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4851
        +user: App\Entity\User {#4218 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4746
          +user: Proxies\__CG__\App\Entity\User {#4747 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: App\Entity\EntryComment {#4205
            +user: App\Entity\User {#4218 …}
            +entry: App\Entity\Entry {#2412}
            +magazine: App\Entity\Magazine {#264}
            +image: null
            +parent: null
            +root: null
            +body: """
              Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
              \n
              I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
              \n
              I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
              \n
              Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
              """
            +lang: "en"
            +isAdult: false
            +favouriteCount: 46
            +score: 0
            +lastActive: DateTime @1710417485 {#4200
              date: 2024-03-14 12:58:05.0 +01:00
            }
            +ip: null
            +tags: null
            +mentions: [
              "@j4k3@lemmy.world"
            ]
            +children: Doctrine\ORM\PersistentCollection {#4206 …}
            +nested: Doctrine\ORM\PersistentCollection {#4208 …}
            +votes: Doctrine\ORM\PersistentCollection {#4210 …}
            +reports: Doctrine\ORM\PersistentCollection {#4212 …}
            +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
            +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
            -id: 252174
            -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
            +ranking: 0
            +commentCount: 0
            +upVotes: 0
            +downVotes: 0
            +visibility: "visible             "
            +apId: "https://pawb.social/comment/4918875"
            +editedAt: null
            +createdAt: DateTimeImmutable @1703545288 {#4201
              date: 2023-12-26 00:01:28.0 +01:00
            }
          }
          +root: App\Entity\EntryComment {#4205}
          +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
          +lang: "en"
          +isAdult: false
          +favouriteCount: 15
          +score: 0
          +lastActive: DateTime @1703548351 {#4744
            date: 2023-12-26 00:52:31.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
            "@savvywolf@pawb.social"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4748 …}
          +nested: Doctrine\ORM\PersistentCollection {#4750 …}
          +votes: Doctrine\ORM\PersistentCollection {#4752 …}
          +reports: Doctrine\ORM\PersistentCollection {#4754 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
          -id: 252288
          -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://sh.itjust.works/comment/6839200"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703548351 {#4745
            date: 2023-12-26 00:52:31.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4205}
        +body: """
          I’ve heard that before, but there are two main problems that stick out to me:\n
          \n
          - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
          - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
          \n
          I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 11
        +score: 0
        +lastActive: DateTime @1703552012 {#4852
          date: 2023-12-26 01:53:32.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@savvywolf@pawb.social"
          "@wildbus8979@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4846 …}
        +nested: Doctrine\ORM\PersistentCollection {#4840 …}
        +votes: Doctrine\ORM\PersistentCollection {#4844 …}
        +reports: Doctrine\ORM\PersistentCollection {#4855 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
        -id: 252387
        -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://pawb.social/comment/4919933"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703552012 {#4849
          date: 2023-12-26 01:53:32.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: "The bootloader is stored unencrypted on your disk. Therefore it is trivial to modify, the other person just needs to power down your PC, take the hard drive out, mount it on their own PC and modify stuff. This is the Evil Maid attack the other person talked about."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 9
      +score: 0
      +lastActive: DateTime @1703587828 {#4902
        date: 2023-12-26 11:50:28.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
        "@wildbus8979@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4895 …}
      +nested: Doctrine\ORM\PersistentCollection {#4893 …}
      +votes: Doctrine\ORM\PersistentCollection {#4897 …}
      +reports: Doctrine\ORM\PersistentCollection {#4908 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4910 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4912 …}
      -id: 253287
      -bodyTs: "'attack':44 'bootload':2 'disk':8 'drive':28 'evil':42 'hard':27 'maid':43 'modifi':14,37 'mount':30 'need':19 'pc':24,35 'person':17,47 'power':21 'store':4 'stuff':38 'take':25 'talk':48 'therefor':9 'trivial':12 'unencrypt':5"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/6846967"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703587828 {#4905
        date: 2023-12-26 11:50:28.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: "I can’t see that being a reasonable approach for them to take, tbh. One option with TPM is that your system logs in automatically to the desktop, in which case they can just turn it on and use it normally. The other is that it requires a password at some point during startup, to which they could just use a (hardware) keylogger."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 2
    +score: 0
    +lastActive: DateTime @1703591850 {#4965
      date: 2023-12-26 12:57:30.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
      "@metiulekm@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4969 …}
    +nested: Doctrine\ORM\PersistentCollection {#4974 …}
    +votes: Doctrine\ORM\PersistentCollection {#4970 …}
    +reports: Doctrine\ORM\PersistentCollection {#4976 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4978 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4980 …}
    -id: 253384
    -bodyTs: "'approach':9 'automat':25 'case':31 'could':58 'desktop':28 'hardwar':62 'keylogg':63 'log':23 'normal':41 'one':15 'option':16 'password':49 'point':52 'reason':8 'requir':47 'see':4 'startup':54 'system':22 'take':13 'tbh':14 'tpm':18 'turn':35 'use':39,60"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4925017"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703591850 {#4962
      date: 2023-12-26 12:57:30.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: "It only at most auto logs you into the display manager or more generally into login. Then you still need to get root access to modify anything from there. Login would still be based on user password/key/whatever."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1703598410 {#5034
    date: 2023-12-26 14:46:50.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@metiulekm@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5038 …}
  +nested: Doctrine\ORM\PersistentCollection {#5043 …}
  +votes: Doctrine\ORM\PersistentCollection {#5039 …}
  +reports: Doctrine\ORM\PersistentCollection {#5045 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5047 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5049 …}
  -id: 254207
  -bodyTs: "'access':24 'anyth':27 'auto':5 'base':34 'display':10 'general':14 'get':22 'log':6 'login':16,30 'manag':11 'modifi':26 'need':20 'password/key/whatever':37 'root':23 'still':19,32 'user':36 'would':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5950853"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703598410 {#5031
    date: 2023-12-26 14:46:50.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
60 DENIED moderate 
App\Entity\EntryComment {#5035
  +user: Proxies\__CG__\App\Entity\User {#4730 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4966
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4901
      +user: Proxies\__CG__\App\Entity\User {#4898 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4851
        +user: App\Entity\User {#4218 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4746
          +user: Proxies\__CG__\App\Entity\User {#4747 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: App\Entity\EntryComment {#4205
            +user: App\Entity\User {#4218 …}
            +entry: App\Entity\Entry {#2412}
            +magazine: App\Entity\Magazine {#264}
            +image: null
            +parent: null
            +root: null
            +body: """
              Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
              \n
              I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
              \n
              I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
              \n
              Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
              """
            +lang: "en"
            +isAdult: false
            +favouriteCount: 46
            +score: 0
            +lastActive: DateTime @1710417485 {#4200
              date: 2024-03-14 12:58:05.0 +01:00
            }
            +ip: null
            +tags: null
            +mentions: [
              "@j4k3@lemmy.world"
            ]
            +children: Doctrine\ORM\PersistentCollection {#4206 …}
            +nested: Doctrine\ORM\PersistentCollection {#4208 …}
            +votes: Doctrine\ORM\PersistentCollection {#4210 …}
            +reports: Doctrine\ORM\PersistentCollection {#4212 …}
            +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
            +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
            -id: 252174
            -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
            +ranking: 0
            +commentCount: 0
            +upVotes: 0
            +downVotes: 0
            +visibility: "visible             "
            +apId: "https://pawb.social/comment/4918875"
            +editedAt: null
            +createdAt: DateTimeImmutable @1703545288 {#4201
              date: 2023-12-26 00:01:28.0 +01:00
            }
          }
          +root: App\Entity\EntryComment {#4205}
          +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
          +lang: "en"
          +isAdult: false
          +favouriteCount: 15
          +score: 0
          +lastActive: DateTime @1703548351 {#4744
            date: 2023-12-26 00:52:31.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
            "@savvywolf@pawb.social"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4748 …}
          +nested: Doctrine\ORM\PersistentCollection {#4750 …}
          +votes: Doctrine\ORM\PersistentCollection {#4752 …}
          +reports: Doctrine\ORM\PersistentCollection {#4754 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
          -id: 252288
          -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://sh.itjust.works/comment/6839200"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703548351 {#4745
            date: 2023-12-26 00:52:31.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4205}
        +body: """
          I’ve heard that before, but there are two main problems that stick out to me:\n
          \n
          - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
          - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
          \n
          I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 11
        +score: 0
        +lastActive: DateTime @1703552012 {#4852
          date: 2023-12-26 01:53:32.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@savvywolf@pawb.social"
          "@wildbus8979@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4846 …}
        +nested: Doctrine\ORM\PersistentCollection {#4840 …}
        +votes: Doctrine\ORM\PersistentCollection {#4844 …}
        +reports: Doctrine\ORM\PersistentCollection {#4855 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
        -id: 252387
        -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://pawb.social/comment/4919933"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703552012 {#4849
          date: 2023-12-26 01:53:32.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: "The bootloader is stored unencrypted on your disk. Therefore it is trivial to modify, the other person just needs to power down your PC, take the hard drive out, mount it on their own PC and modify stuff. This is the Evil Maid attack the other person talked about."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 9
      +score: 0
      +lastActive: DateTime @1703587828 {#4902
        date: 2023-12-26 11:50:28.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
        "@wildbus8979@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4895 …}
      +nested: Doctrine\ORM\PersistentCollection {#4893 …}
      +votes: Doctrine\ORM\PersistentCollection {#4897 …}
      +reports: Doctrine\ORM\PersistentCollection {#4908 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4910 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4912 …}
      -id: 253287
      -bodyTs: "'attack':44 'bootload':2 'disk':8 'drive':28 'evil':42 'hard':27 'maid':43 'modifi':14,37 'mount':30 'need':19 'pc':24,35 'person':17,47 'power':21 'store':4 'stuff':38 'take':25 'talk':48 'therefor':9 'trivial':12 'unencrypt':5"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/6846967"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703587828 {#4905
        date: 2023-12-26 11:50:28.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: "I can’t see that being a reasonable approach for them to take, tbh. One option with TPM is that your system logs in automatically to the desktop, in which case they can just turn it on and use it normally. The other is that it requires a password at some point during startup, to which they could just use a (hardware) keylogger."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 2
    +score: 0
    +lastActive: DateTime @1703591850 {#4965
      date: 2023-12-26 12:57:30.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
      "@metiulekm@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4969 …}
    +nested: Doctrine\ORM\PersistentCollection {#4974 …}
    +votes: Doctrine\ORM\PersistentCollection {#4970 …}
    +reports: Doctrine\ORM\PersistentCollection {#4976 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4978 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4980 …}
    -id: 253384
    -bodyTs: "'approach':9 'automat':25 'case':31 'could':58 'desktop':28 'hardwar':62 'keylogg':63 'log':23 'normal':41 'one':15 'option':16 'password':49 'point':52 'reason':8 'requir':47 'see':4 'startup':54 'system':22 'take':13 'tbh':14 'tpm':18 'turn':35 'use':39,60"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4925017"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703591850 {#4962
      date: 2023-12-26 12:57:30.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: "It only at most auto logs you into the display manager or more generally into login. Then you still need to get root access to modify anything from there. Login would still be based on user password/key/whatever."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1703598410 {#5034
    date: 2023-12-26 14:46:50.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@metiulekm@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5038 …}
  +nested: Doctrine\ORM\PersistentCollection {#5043 …}
  +votes: Doctrine\ORM\PersistentCollection {#5039 …}
  +reports: Doctrine\ORM\PersistentCollection {#5045 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5047 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5049 …}
  -id: 254207
  -bodyTs: "'access':24 'anyth':27 'auto':5 'base':34 'display':10 'general':14 'get':22 'log':6 'login':16,30 'manag':11 'modifi':26 'need':20 'password/key/whatever':37 'root':23 'still':19,32 'user':36 'would':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5950853"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703598410 {#5031
    date: 2023-12-26 14:46:50.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
61 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
62 DENIED moderate 
App\Entity\EntryComment {#4984
  +user: Proxies\__CG__\App\Entity\User {#4985 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4901
    +user: Proxies\__CG__\App\Entity\User {#4898 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4851
      +user: App\Entity\User {#4218 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4746
        +user: Proxies\__CG__\App\Entity\User {#4747 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4205
          +user: App\Entity\User {#4218 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: null
          +root: null
          +body: """
            Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
            \n
            I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
            \n
            I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
            \n
            Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 46
          +score: 0
          +lastActive: DateTime @1710417485 {#4200
            date: 2024-03-14 12:58:05.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4206 …}
          +nested: Doctrine\ORM\PersistentCollection {#4208 …}
          +votes: Doctrine\ORM\PersistentCollection {#4210 …}
          +reports: Doctrine\ORM\PersistentCollection {#4212 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
          -id: 252174
          -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://pawb.social/comment/4918875"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703545288 {#4201
            date: 2023-12-26 00:01:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4205}
        +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 15
        +score: 0
        +lastActive: DateTime @1703548351 {#4744
          date: 2023-12-26 00:52:31.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@savvywolf@pawb.social"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4748 …}
        +nested: Doctrine\ORM\PersistentCollection {#4750 …}
        +votes: Doctrine\ORM\PersistentCollection {#4752 …}
        +reports: Doctrine\ORM\PersistentCollection {#4754 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
        -id: 252288
        -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://sh.itjust.works/comment/6839200"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703548351 {#4745
          date: 2023-12-26 00:52:31.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: """
        I’ve heard that before, but there are two main problems that stick out to me:\n
        \n
        - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
        - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
        \n
        I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 11
      +score: 0
      +lastActive: DateTime @1703552012 {#4852
        date: 2023-12-26 01:53:32.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
        "@wildbus8979@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4846 …}
      +nested: Doctrine\ORM\PersistentCollection {#4840 …}
      +votes: Doctrine\ORM\PersistentCollection {#4844 …}
      +reports: Doctrine\ORM\PersistentCollection {#4855 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
      -id: 252387
      -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://pawb.social/comment/4919933"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703552012 {#4849
        date: 2023-12-26 01:53:32.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: "The bootloader is stored unencrypted on your disk. Therefore it is trivial to modify, the other person just needs to power down your PC, take the hard drive out, mount it on their own PC and modify stuff. This is the Evil Maid attack the other person talked about."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 9
    +score: 0
    +lastActive: DateTime @1703587828 {#4902
      date: 2023-12-26 11:50:28.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4895 …}
    +nested: Doctrine\ORM\PersistentCollection {#4893 …}
    +votes: Doctrine\ORM\PersistentCollection {#4897 …}
    +reports: Doctrine\ORM\PersistentCollection {#4908 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4910 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4912 …}
    -id: 253287
    -bodyTs: "'attack':44 'bootload':2 'disk':8 'drive':28 'evil':42 'hard':27 'maid':43 'modifi':14,37 'mount':30 'need':19 'pc':24,35 'person':17,47 'power':21 'store':4 'stuff':38 'take':25 'talk':48 'therefor':9 'trivial':12 'unencrypt':5"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/6846967"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703587828 {#4905
      date: 2023-12-26 11:50:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    Otherwise you simply have a USB boot partition.\n
    \n
    Pretty easy to set up, can be taken out to not be modified at run time unless you want plus not being stolen with the computer itself.\n
    \n
    I see only drawbacks with a TPM for a computer system like that. In embedded credentials, mobile applications, cold credential storage, etc… it works very well, but it doesn’t solve any problem that someone tech savvy doesn’t have a better solution for, in my opinion.\n
    \n
    If you are a big enough target for an evil maid attack, you are either good enough to circumvent it better than an embedded TPM, or you are rich enough to hire someone who is.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1703596911 {#4982
    date: 2023-12-26 14:21:51.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@metiulekm@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4986 …}
  +nested: Doctrine\ORM\PersistentCollection {#4988 …}
  +votes: Doctrine\ORM\PersistentCollection {#4990 …}
  +reports: Doctrine\ORM\PersistentCollection {#4992 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4994 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4996 …}
  -id: 253542
  -bodyTs: "'applic':53 'attack':94 'better':77,103 'big':87 'boot':7 'circumv':101 'cold':54 'comput':34,45 'credenti':51,55 'doesn':64,73 'drawback':39 'easi':10 'either':97 'embed':50,106 'enough':88,99,112 'etc':57 'evil':92 'good':98 'hire':114 'like':47 'maid':93 'mobil':52 'modifi':21 'opinion':82 'otherwis':1 'partit':8 'plus':28 'pretti':9 'problem':68 'rich':111 'run':23 'savvi':72 'see':37 'set':12 'simpli':3 'solut':78 'solv':66 'someon':70,115 'stolen':31 'storag':56 'system':46 'taken':16 'target':89 'tech':71 'time':24 'tpm':42,107 'unless':25 'usb':6 'want':27 'well':61 'work':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5574803"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703596911 {#4983
    date: 2023-12-26 14:21:51.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
63 DENIED edit 
App\Entity\EntryComment {#4984
  +user: Proxies\__CG__\App\Entity\User {#4985 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4901
    +user: Proxies\__CG__\App\Entity\User {#4898 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4851
      +user: App\Entity\User {#4218 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4746
        +user: Proxies\__CG__\App\Entity\User {#4747 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4205
          +user: App\Entity\User {#4218 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: null
          +root: null
          +body: """
            Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
            \n
            I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
            \n
            I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
            \n
            Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 46
          +score: 0
          +lastActive: DateTime @1710417485 {#4200
            date: 2024-03-14 12:58:05.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4206 …}
          +nested: Doctrine\ORM\PersistentCollection {#4208 …}
          +votes: Doctrine\ORM\PersistentCollection {#4210 …}
          +reports: Doctrine\ORM\PersistentCollection {#4212 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
          -id: 252174
          -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://pawb.social/comment/4918875"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703545288 {#4201
            date: 2023-12-26 00:01:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4205}
        +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 15
        +score: 0
        +lastActive: DateTime @1703548351 {#4744
          date: 2023-12-26 00:52:31.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@savvywolf@pawb.social"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4748 …}
        +nested: Doctrine\ORM\PersistentCollection {#4750 …}
        +votes: Doctrine\ORM\PersistentCollection {#4752 …}
        +reports: Doctrine\ORM\PersistentCollection {#4754 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
        -id: 252288
        -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://sh.itjust.works/comment/6839200"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703548351 {#4745
          date: 2023-12-26 00:52:31.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: """
        I’ve heard that before, but there are two main problems that stick out to me:\n
        \n
        - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
        - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
        \n
        I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 11
      +score: 0
      +lastActive: DateTime @1703552012 {#4852
        date: 2023-12-26 01:53:32.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
        "@wildbus8979@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4846 …}
      +nested: Doctrine\ORM\PersistentCollection {#4840 …}
      +votes: Doctrine\ORM\PersistentCollection {#4844 …}
      +reports: Doctrine\ORM\PersistentCollection {#4855 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
      -id: 252387
      -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://pawb.social/comment/4919933"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703552012 {#4849
        date: 2023-12-26 01:53:32.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: "The bootloader is stored unencrypted on your disk. Therefore it is trivial to modify, the other person just needs to power down your PC, take the hard drive out, mount it on their own PC and modify stuff. This is the Evil Maid attack the other person talked about."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 9
    +score: 0
    +lastActive: DateTime @1703587828 {#4902
      date: 2023-12-26 11:50:28.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4895 …}
    +nested: Doctrine\ORM\PersistentCollection {#4893 …}
    +votes: Doctrine\ORM\PersistentCollection {#4897 …}
    +reports: Doctrine\ORM\PersistentCollection {#4908 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4910 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4912 …}
    -id: 253287
    -bodyTs: "'attack':44 'bootload':2 'disk':8 'drive':28 'evil':42 'hard':27 'maid':43 'modifi':14,37 'mount':30 'need':19 'pc':24,35 'person':17,47 'power':21 'store':4 'stuff':38 'take':25 'talk':48 'therefor':9 'trivial':12 'unencrypt':5"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/6846967"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703587828 {#4905
      date: 2023-12-26 11:50:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    Otherwise you simply have a USB boot partition.\n
    \n
    Pretty easy to set up, can be taken out to not be modified at run time unless you want plus not being stolen with the computer itself.\n
    \n
    I see only drawbacks with a TPM for a computer system like that. In embedded credentials, mobile applications, cold credential storage, etc… it works very well, but it doesn’t solve any problem that someone tech savvy doesn’t have a better solution for, in my opinion.\n
    \n
    If you are a big enough target for an evil maid attack, you are either good enough to circumvent it better than an embedded TPM, or you are rich enough to hire someone who is.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1703596911 {#4982
    date: 2023-12-26 14:21:51.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@metiulekm@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4986 …}
  +nested: Doctrine\ORM\PersistentCollection {#4988 …}
  +votes: Doctrine\ORM\PersistentCollection {#4990 …}
  +reports: Doctrine\ORM\PersistentCollection {#4992 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4994 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4996 …}
  -id: 253542
  -bodyTs: "'applic':53 'attack':94 'better':77,103 'big':87 'boot':7 'circumv':101 'cold':54 'comput':34,45 'credenti':51,55 'doesn':64,73 'drawback':39 'easi':10 'either':97 'embed':50,106 'enough':88,99,112 'etc':57 'evil':92 'good':98 'hire':114 'like':47 'maid':93 'mobil':52 'modifi':21 'opinion':82 'otherwis':1 'partit':8 'plus':28 'pretti':9 'problem':68 'rich':111 'run':23 'savvi':72 'see':37 'set':12 'simpli':3 'solut':78 'solv':66 'someon':70,115 'stolen':31 'storag':56 'system':46 'taken':16 'target':89 'tech':71 'time':24 'tpm':42,107 'unless':25 'usb':6 'want':27 'well':61 'work':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5574803"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703596911 {#4983
    date: 2023-12-26 14:21:51.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
64 DENIED moderate 
App\Entity\EntryComment {#4984
  +user: Proxies\__CG__\App\Entity\User {#4985 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4901
    +user: Proxies\__CG__\App\Entity\User {#4898 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4851
      +user: App\Entity\User {#4218 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4746
        +user: Proxies\__CG__\App\Entity\User {#4747 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4205
          +user: App\Entity\User {#4218 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: null
          +root: null
          +body: """
            Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
            \n
            I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
            \n
            I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
            \n
            Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 46
          +score: 0
          +lastActive: DateTime @1710417485 {#4200
            date: 2024-03-14 12:58:05.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4206 …}
          +nested: Doctrine\ORM\PersistentCollection {#4208 …}
          +votes: Doctrine\ORM\PersistentCollection {#4210 …}
          +reports: Doctrine\ORM\PersistentCollection {#4212 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
          -id: 252174
          -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://pawb.social/comment/4918875"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703545288 {#4201
            date: 2023-12-26 00:01:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4205}
        +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 15
        +score: 0
        +lastActive: DateTime @1703548351 {#4744
          date: 2023-12-26 00:52:31.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@savvywolf@pawb.social"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4748 …}
        +nested: Doctrine\ORM\PersistentCollection {#4750 …}
        +votes: Doctrine\ORM\PersistentCollection {#4752 …}
        +reports: Doctrine\ORM\PersistentCollection {#4754 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
        -id: 252288
        -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://sh.itjust.works/comment/6839200"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703548351 {#4745
          date: 2023-12-26 00:52:31.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: """
        I’ve heard that before, but there are two main problems that stick out to me:\n
        \n
        - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
        - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
        \n
        I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 11
      +score: 0
      +lastActive: DateTime @1703552012 {#4852
        date: 2023-12-26 01:53:32.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
        "@wildbus8979@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4846 …}
      +nested: Doctrine\ORM\PersistentCollection {#4840 …}
      +votes: Doctrine\ORM\PersistentCollection {#4844 …}
      +reports: Doctrine\ORM\PersistentCollection {#4855 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
      -id: 252387
      -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://pawb.social/comment/4919933"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703552012 {#4849
        date: 2023-12-26 01:53:32.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: "The bootloader is stored unencrypted on your disk. Therefore it is trivial to modify, the other person just needs to power down your PC, take the hard drive out, mount it on their own PC and modify stuff. This is the Evil Maid attack the other person talked about."
    +lang: "en"
    +isAdult: false
    +favouriteCount: 9
    +score: 0
    +lastActive: DateTime @1703587828 {#4902
      date: 2023-12-26 11:50:28.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4895 …}
    +nested: Doctrine\ORM\PersistentCollection {#4893 …}
    +votes: Doctrine\ORM\PersistentCollection {#4897 …}
    +reports: Doctrine\ORM\PersistentCollection {#4908 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4910 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4912 …}
    -id: 253287
    -bodyTs: "'attack':44 'bootload':2 'disk':8 'drive':28 'evil':42 'hard':27 'maid':43 'modifi':14,37 'mount':30 'need':19 'pc':24,35 'person':17,47 'power':21 'store':4 'stuff':38 'take':25 'talk':48 'therefor':9 'trivial':12 'unencrypt':5"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://sh.itjust.works/comment/6846967"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703587828 {#4905
      date: 2023-12-26 11:50:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    Otherwise you simply have a USB boot partition.\n
    \n
    Pretty easy to set up, can be taken out to not be modified at run time unless you want plus not being stolen with the computer itself.\n
    \n
    I see only drawbacks with a TPM for a computer system like that. In embedded credentials, mobile applications, cold credential storage, etc… it works very well, but it doesn’t solve any problem that someone tech savvy doesn’t have a better solution for, in my opinion.\n
    \n
    If you are a big enough target for an evil maid attack, you are either good enough to circumvent it better than an embedded TPM, or you are rich enough to hire someone who is.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1703596911 {#4982
    date: 2023-12-26 14:21:51.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@metiulekm@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4986 …}
  +nested: Doctrine\ORM\PersistentCollection {#4988 …}
  +votes: Doctrine\ORM\PersistentCollection {#4990 …}
  +reports: Doctrine\ORM\PersistentCollection {#4992 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4994 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4996 …}
  -id: 253542
  -bodyTs: "'applic':53 'attack':94 'better':77,103 'big':87 'boot':7 'circumv':101 'cold':54 'comput':34,45 'credenti':51,55 'doesn':64,73 'drawback':39 'easi':10 'either':97 'embed':50,106 'enough':88,99,112 'etc':57 'evil':92 'good':98 'hire':114 'like':47 'maid':93 'mobil':52 'modifi':21 'opinion':82 'otherwis':1 'partit':8 'plus':28 'pretti':9 'problem':68 'rich':111 'run':23 'savvi':72 'see':37 'set':12 'simpli':3 'solut':78 'solv':66 'someon':70,115 'stolen':31 'storag':56 'system':46 'taken':16 'target':89 'tech':71 'time':24 'tpm':42,107 'unless':25 'usb':6 'want':27 'well':61 'work':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5574803"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703596911 {#4983
    date: 2023-12-26 14:21:51.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
65 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
66 DENIED moderate 
App\Entity\EntryComment {#4916
  +user: Proxies\__CG__\App\Entity\User {#4763 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4851
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4746
      +user: Proxies\__CG__\App\Entity\User {#4747 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4205
        +user: App\Entity\User {#4218 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: """
          Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
          \n
          I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
          \n
          I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
          \n
          Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 46
        +score: 0
        +lastActive: DateTime @1710417485 {#4200
          date: 2024-03-14 12:58:05.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4206 …}
        +nested: Doctrine\ORM\PersistentCollection {#4208 …}
        +votes: Doctrine\ORM\PersistentCollection {#4210 …}
        +reports: Doctrine\ORM\PersistentCollection {#4212 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
        -id: 252174
        -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://pawb.social/comment/4918875"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703545288 {#4201
          date: 2023-12-26 00:01:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 15
      +score: 0
      +lastActive: DateTime @1703548351 {#4744
        date: 2023-12-26 00:52:31.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4748 …}
      +nested: Doctrine\ORM\PersistentCollection {#4750 …}
      +votes: Doctrine\ORM\PersistentCollection {#4752 …}
      +reports: Doctrine\ORM\PersistentCollection {#4754 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
      -id: 252288
      -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/6839200"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703548351 {#4745
        date: 2023-12-26 00:52:31.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: """
      I’ve heard that before, but there are two main problems that stick out to me:\n
      \n
      - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
      - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
      \n
      I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 11
    +score: 0
    +lastActive: DateTime @1703552012 {#4852
      date: 2023-12-26 01:53:32.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4846 …}
    +nested: Doctrine\ORM\PersistentCollection {#4840 …}
    +votes: Doctrine\ORM\PersistentCollection {#4844 …}
    +reports: Doctrine\ORM\PersistentCollection {#4855 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
    -id: 252387
    -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4919933"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703552012 {#4849
      date: 2023-12-26 01:53:32.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    If the device is stolen, your disk is still encrypted at all time. If you believe your OS’s login system is reasonably secure, then the attacker should have no way to access your data: they cannot access the data from software because it is blocked by login screen, they cannot access the data from hardware because it is protected by FDE.\n
    \n
    One of the misconceptions I had before is that I assumed that the disk will be decrypted when you enter the LUKS password. This is not true, the password is loaded into the ram, and only decrypts necessary parts to RAM. All the data on the disk is never decrypted, even when you are working in your OS.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1703570642 {#4914
    date: 2023-12-26 07:04:02.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4917 …}
  +nested: Doctrine\ORM\PersistentCollection {#4919 …}
  +votes: Doctrine\ORM\PersistentCollection {#4921 …}
  +reports: Doctrine\ORM\PersistentCollection {#4923 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4925 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4927 …}
  -id: 254609
  -bodyTs: "'access':33,38,52 'assum':73 'attack':27 'believ':16 'block':46 'cannot':37,51 'data':35,40,54,106 'decrypt':79,99,112 'devic':3 'disk':7,76,109 'encrypt':10 'enter':82 'even':113 'fde':62 'hardwar':56 'load':93 'login':20,48 'luk':84 'misconcept':66 'necessari':100 'never':111 'one':63 'os':18,120 'part':101 'password':85,91 'protect':60 'ram':96,103 'reason':23 'screen':49 'secur':24 'softwar':42 'still':9 'stolen':5 'system':21 'time':13 'true':89 'way':31 'work':117"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://mander.xyz/comment/6269943"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703570642 {#4915
    date: 2023-12-26 07:04:02.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
67 DENIED edit 
App\Entity\EntryComment {#4916
  +user: Proxies\__CG__\App\Entity\User {#4763 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4851
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4746
      +user: Proxies\__CG__\App\Entity\User {#4747 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4205
        +user: App\Entity\User {#4218 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: """
          Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
          \n
          I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
          \n
          I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
          \n
          Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 46
        +score: 0
        +lastActive: DateTime @1710417485 {#4200
          date: 2024-03-14 12:58:05.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4206 …}
        +nested: Doctrine\ORM\PersistentCollection {#4208 …}
        +votes: Doctrine\ORM\PersistentCollection {#4210 …}
        +reports: Doctrine\ORM\PersistentCollection {#4212 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
        -id: 252174
        -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://pawb.social/comment/4918875"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703545288 {#4201
          date: 2023-12-26 00:01:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 15
      +score: 0
      +lastActive: DateTime @1703548351 {#4744
        date: 2023-12-26 00:52:31.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4748 …}
      +nested: Doctrine\ORM\PersistentCollection {#4750 …}
      +votes: Doctrine\ORM\PersistentCollection {#4752 …}
      +reports: Doctrine\ORM\PersistentCollection {#4754 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
      -id: 252288
      -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/6839200"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703548351 {#4745
        date: 2023-12-26 00:52:31.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: """
      I’ve heard that before, but there are two main problems that stick out to me:\n
      \n
      - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
      - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
      \n
      I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 11
    +score: 0
    +lastActive: DateTime @1703552012 {#4852
      date: 2023-12-26 01:53:32.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4846 …}
    +nested: Doctrine\ORM\PersistentCollection {#4840 …}
    +votes: Doctrine\ORM\PersistentCollection {#4844 …}
    +reports: Doctrine\ORM\PersistentCollection {#4855 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
    -id: 252387
    -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4919933"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703552012 {#4849
      date: 2023-12-26 01:53:32.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    If the device is stolen, your disk is still encrypted at all time. If you believe your OS’s login system is reasonably secure, then the attacker should have no way to access your data: they cannot access the data from software because it is blocked by login screen, they cannot access the data from hardware because it is protected by FDE.\n
    \n
    One of the misconceptions I had before is that I assumed that the disk will be decrypted when you enter the LUKS password. This is not true, the password is loaded into the ram, and only decrypts necessary parts to RAM. All the data on the disk is never decrypted, even when you are working in your OS.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1703570642 {#4914
    date: 2023-12-26 07:04:02.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4917 …}
  +nested: Doctrine\ORM\PersistentCollection {#4919 …}
  +votes: Doctrine\ORM\PersistentCollection {#4921 …}
  +reports: Doctrine\ORM\PersistentCollection {#4923 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4925 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4927 …}
  -id: 254609
  -bodyTs: "'access':33,38,52 'assum':73 'attack':27 'believ':16 'block':46 'cannot':37,51 'data':35,40,54,106 'decrypt':79,99,112 'devic':3 'disk':7,76,109 'encrypt':10 'enter':82 'even':113 'fde':62 'hardwar':56 'load':93 'login':20,48 'luk':84 'misconcept':66 'necessari':100 'never':111 'one':63 'os':18,120 'part':101 'password':85,91 'protect':60 'ram':96,103 'reason':23 'screen':49 'secur':24 'softwar':42 'still':9 'stolen':5 'system':21 'time':13 'true':89 'way':31 'work':117"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://mander.xyz/comment/6269943"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703570642 {#4915
    date: 2023-12-26 07:04:02.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
68 DENIED moderate 
App\Entity\EntryComment {#4916
  +user: Proxies\__CG__\App\Entity\User {#4763 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4851
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4746
      +user: Proxies\__CG__\App\Entity\User {#4747 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4205
        +user: App\Entity\User {#4218 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: """
          Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
          \n
          I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
          \n
          I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
          \n
          Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 46
        +score: 0
        +lastActive: DateTime @1710417485 {#4200
          date: 2024-03-14 12:58:05.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4206 …}
        +nested: Doctrine\ORM\PersistentCollection {#4208 …}
        +votes: Doctrine\ORM\PersistentCollection {#4210 …}
        +reports: Doctrine\ORM\PersistentCollection {#4212 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
        -id: 252174
        -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://pawb.social/comment/4918875"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703545288 {#4201
          date: 2023-12-26 00:01:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 15
      +score: 0
      +lastActive: DateTime @1703548351 {#4744
        date: 2023-12-26 00:52:31.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4748 …}
      +nested: Doctrine\ORM\PersistentCollection {#4750 …}
      +votes: Doctrine\ORM\PersistentCollection {#4752 …}
      +reports: Doctrine\ORM\PersistentCollection {#4754 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
      -id: 252288
      -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/6839200"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703548351 {#4745
        date: 2023-12-26 00:52:31.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: """
      I’ve heard that before, but there are two main problems that stick out to me:\n
      \n
      - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
      - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
      \n
      I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 11
    +score: 0
    +lastActive: DateTime @1703552012 {#4852
      date: 2023-12-26 01:53:32.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4846 …}
    +nested: Doctrine\ORM\PersistentCollection {#4840 …}
    +votes: Doctrine\ORM\PersistentCollection {#4844 …}
    +reports: Doctrine\ORM\PersistentCollection {#4855 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
    -id: 252387
    -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4919933"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703552012 {#4849
      date: 2023-12-26 01:53:32.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    If the device is stolen, your disk is still encrypted at all time. If you believe your OS’s login system is reasonably secure, then the attacker should have no way to access your data: they cannot access the data from software because it is blocked by login screen, they cannot access the data from hardware because it is protected by FDE.\n
    \n
    One of the misconceptions I had before is that I assumed that the disk will be decrypted when you enter the LUKS password. This is not true, the password is loaded into the ram, and only decrypts necessary parts to RAM. All the data on the disk is never decrypted, even when you are working in your OS.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1703570642 {#4914
    date: 2023-12-26 07:04:02.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4917 …}
  +nested: Doctrine\ORM\PersistentCollection {#4919 …}
  +votes: Doctrine\ORM\PersistentCollection {#4921 …}
  +reports: Doctrine\ORM\PersistentCollection {#4923 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4925 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4927 …}
  -id: 254609
  -bodyTs: "'access':33,38,52 'assum':73 'attack':27 'believ':16 'block':46 'cannot':37,51 'data':35,40,54,106 'decrypt':79,99,112 'devic':3 'disk':7,76,109 'encrypt':10 'enter':82 'even':113 'fde':62 'hardwar':56 'load':93 'login':20,48 'luk':84 'misconcept':66 'necessari':100 'never':111 'one':63 'os':18,120 'part':101 'password':85,91 'protect':60 'ram':96,103 'reason':23 'screen':49 'secur':24 'softwar':42 'still':9 'stolen':5 'system':21 'time':13 'true':89 'way':31 'work':117"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://mander.xyz/comment/6269943"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703570642 {#4915
    date: 2023-12-26 07:04:02.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
69 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
70 DENIED moderate 
App\Entity\EntryComment {#5001
  +user: Proxies\__CG__\App\Entity\User {#4794 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4916
    +user: Proxies\__CG__\App\Entity\User {#4763 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4851
      +user: App\Entity\User {#4218 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4746
        +user: Proxies\__CG__\App\Entity\User {#4747 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4205
          +user: App\Entity\User {#4218 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: null
          +root: null
          +body: """
            Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
            \n
            I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
            \n
            I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
            \n
            Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 46
          +score: 0
          +lastActive: DateTime @1710417485 {#4200
            date: 2024-03-14 12:58:05.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4206 …}
          +nested: Doctrine\ORM\PersistentCollection {#4208 …}
          +votes: Doctrine\ORM\PersistentCollection {#4210 …}
          +reports: Doctrine\ORM\PersistentCollection {#4212 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
          -id: 252174
          -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://pawb.social/comment/4918875"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703545288 {#4201
            date: 2023-12-26 00:01:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4205}
        +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 15
        +score: 0
        +lastActive: DateTime @1703548351 {#4744
          date: 2023-12-26 00:52:31.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@savvywolf@pawb.social"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4748 …}
        +nested: Doctrine\ORM\PersistentCollection {#4750 …}
        +votes: Doctrine\ORM\PersistentCollection {#4752 …}
        +reports: Doctrine\ORM\PersistentCollection {#4754 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
        -id: 252288
        -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://sh.itjust.works/comment/6839200"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703548351 {#4745
          date: 2023-12-26 00:52:31.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: """
        I’ve heard that before, but there are two main problems that stick out to me:\n
        \n
        - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
        - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
        \n
        I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 11
      +score: 0
      +lastActive: DateTime @1703552012 {#4852
        date: 2023-12-26 01:53:32.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
        "@wildbus8979@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4846 …}
      +nested: Doctrine\ORM\PersistentCollection {#4840 …}
      +votes: Doctrine\ORM\PersistentCollection {#4844 …}
      +reports: Doctrine\ORM\PersistentCollection {#4855 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
      -id: 252387
      -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://pawb.social/comment/4919933"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703552012 {#4849
        date: 2023-12-26 01:53:32.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: """
      If the device is stolen, your disk is still encrypted at all time. If you believe your OS’s login system is reasonably secure, then the attacker should have no way to access your data: they cannot access the data from software because it is blocked by login screen, they cannot access the data from hardware because it is protected by FDE.\n
      \n
      One of the misconceptions I had before is that I assumed that the disk will be decrypted when you enter the LUKS password. This is not true, the password is loaded into the ram, and only decrypts necessary parts to RAM. All the data on the disk is never decrypted, even when you are working in your OS.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1703570642 {#4914
      date: 2023-12-26 07:04:02.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4917 …}
    +nested: Doctrine\ORM\PersistentCollection {#4919 …}
    +votes: Doctrine\ORM\PersistentCollection {#4921 …}
    +reports: Doctrine\ORM\PersistentCollection {#4923 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4925 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4927 …}
    -id: 254609
    -bodyTs: "'access':33,38,52 'assum':73 'attack':27 'believ':16 'block':46 'cannot':37,51 'data':35,40,54,106 'decrypt':79,99,112 'devic':3 'disk':7,76,109 'encrypt':10 'enter':82 'even':113 'fde':62 'hardwar':56 'load':93 'login':20,48 'luk':84 'misconcept':66 'necessari':100 'never':111 'one':63 'os':18,120 'part':101 'password':85,91 'protect':60 'ram':96,103 'reason':23 'screen':49 'secur':24 'softwar':42 'still':9 'stolen':5 'system':21 'time':13 'true':89 'way':31 'work':117"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://mander.xyz/comment/6269943"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703570642 {#4915
      date: 2023-12-26 07:04:02.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    > they cannot access the data from software because it is blocked by login screen\n
    \n
    The system may still be vulnerable to over the network exploits. So for example, if the system is running `sshd`, and a couple of months from now a root exploit is found (à la heartbleed), the attacker may get inside.\n
    \n
    It’s somewhat of a long shot, but it’s still a much larger attack surface than butting your head against a LUKS encrypted drive that’s at rest.\n
    \n
    > they cannot access the data from hardware because it is protected by FDE.\n
    \n
    RAM is not protected by FDE. There are (obviously non-trivial) ways to dump the RAM of a running system (Cold Boot attacks, and other forensic tools exist). So if the attacker is dedicated enough, there are ways.\n
    \n
    > One of the misconceptions I had before is that I assumed that the disk will be decrypted when you enter the LUKS password. This is not true, the password is loaded into the ram, and only decrypts necessary parts to RAM. All the data on the disk is never decrypted, even when you are working in your OS.\n
    \n
    Hah! That would be impractical :) Imagine having to decrypt your entire 32TB drive array everytime you booted your computer.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1703630441 {#4998
    date: 2023-12-26 23:40:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@baseless_discourse@mander.xyz"
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@baseless_discourse@mander.xyz"
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@baseless_discourse@mander.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5002 …}
  +nested: Doctrine\ORM\PersistentCollection {#5004 …}
  +votes: Doctrine\ORM\PersistentCollection {#5006 …}
  +reports: Doctrine\ORM\PersistentCollection {#5008 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5010 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5012 …}
  -id: 254906
  -bodyTs: "'32tb':205 'access':3,86 'array':207 'assum':146 'attack':51,69,120,129 'block':11 'boot':119,210 'but':72 'cannot':2,85 'cold':118 'comput':212 'coupl':37 'data':5,88,179 'decrypt':152,172,185,202 'dedic':131 'disk':149,182 'drive':79,206 'dump':111 'encrypt':78 'enough':132 'enter':155 'entir':204 'even':186 'everytim':208 'exampl':28 'exist':125 'exploit':25,44 'fde':96,102 'forens':123 'found':46 'get':53 'hah':194 'hardwar':90 'head':74 'heartble':49 'imagin':199 'impract':198 'insid':54 'la':48 'larger':68 'load':166 'login':13 'long':60 'luk':77,157 'may':17,52 'misconcept':139 'month':39 'much':67 'necessari':173 'network':24 'never':184 'non':107 'non-trivi':106 'obvious':105 'one':136 'os':193 'part':174 'password':158,164 'protect':94,100 'ram':97,113,169,176 'rest':83 'root':43 'run':33,116 'screen':14 'shot':61 'softwar':7 'somewhat':57 'sshd':34 'still':18,65 'surfac':70 'system':16,31,117 'tool':124 'trivial':108 'true':162 'vulner':20 'way':109,135 'work':190 'would':196 'à':47"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5581890"
  +editedAt: DateTimeImmutable @1708137349 {#4999
    date: 2024-02-17 03:35:49.0 +01:00
  }
  +createdAt: DateTimeImmutable @1703630441 {#5000
    date: 2023-12-26 23:40:41.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
71 DENIED edit 
App\Entity\EntryComment {#5001
  +user: Proxies\__CG__\App\Entity\User {#4794 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4916
    +user: Proxies\__CG__\App\Entity\User {#4763 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4851
      +user: App\Entity\User {#4218 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4746
        +user: Proxies\__CG__\App\Entity\User {#4747 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4205
          +user: App\Entity\User {#4218 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: null
          +root: null
          +body: """
            Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
            \n
            I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
            \n
            I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
            \n
            Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 46
          +score: 0
          +lastActive: DateTime @1710417485 {#4200
            date: 2024-03-14 12:58:05.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4206 …}
          +nested: Doctrine\ORM\PersistentCollection {#4208 …}
          +votes: Doctrine\ORM\PersistentCollection {#4210 …}
          +reports: Doctrine\ORM\PersistentCollection {#4212 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
          -id: 252174
          -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://pawb.social/comment/4918875"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703545288 {#4201
            date: 2023-12-26 00:01:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4205}
        +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 15
        +score: 0
        +lastActive: DateTime @1703548351 {#4744
          date: 2023-12-26 00:52:31.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@savvywolf@pawb.social"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4748 …}
        +nested: Doctrine\ORM\PersistentCollection {#4750 …}
        +votes: Doctrine\ORM\PersistentCollection {#4752 …}
        +reports: Doctrine\ORM\PersistentCollection {#4754 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
        -id: 252288
        -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://sh.itjust.works/comment/6839200"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703548351 {#4745
          date: 2023-12-26 00:52:31.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: """
        I’ve heard that before, but there are two main problems that stick out to me:\n
        \n
        - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
        - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
        \n
        I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 11
      +score: 0
      +lastActive: DateTime @1703552012 {#4852
        date: 2023-12-26 01:53:32.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
        "@wildbus8979@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4846 …}
      +nested: Doctrine\ORM\PersistentCollection {#4840 …}
      +votes: Doctrine\ORM\PersistentCollection {#4844 …}
      +reports: Doctrine\ORM\PersistentCollection {#4855 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
      -id: 252387
      -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://pawb.social/comment/4919933"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703552012 {#4849
        date: 2023-12-26 01:53:32.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: """
      If the device is stolen, your disk is still encrypted at all time. If you believe your OS’s login system is reasonably secure, then the attacker should have no way to access your data: they cannot access the data from software because it is blocked by login screen, they cannot access the data from hardware because it is protected by FDE.\n
      \n
      One of the misconceptions I had before is that I assumed that the disk will be decrypted when you enter the LUKS password. This is not true, the password is loaded into the ram, and only decrypts necessary parts to RAM. All the data on the disk is never decrypted, even when you are working in your OS.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1703570642 {#4914
      date: 2023-12-26 07:04:02.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4917 …}
    +nested: Doctrine\ORM\PersistentCollection {#4919 …}
    +votes: Doctrine\ORM\PersistentCollection {#4921 …}
    +reports: Doctrine\ORM\PersistentCollection {#4923 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4925 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4927 …}
    -id: 254609
    -bodyTs: "'access':33,38,52 'assum':73 'attack':27 'believ':16 'block':46 'cannot':37,51 'data':35,40,54,106 'decrypt':79,99,112 'devic':3 'disk':7,76,109 'encrypt':10 'enter':82 'even':113 'fde':62 'hardwar':56 'load':93 'login':20,48 'luk':84 'misconcept':66 'necessari':100 'never':111 'one':63 'os':18,120 'part':101 'password':85,91 'protect':60 'ram':96,103 'reason':23 'screen':49 'secur':24 'softwar':42 'still':9 'stolen':5 'system':21 'time':13 'true':89 'way':31 'work':117"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://mander.xyz/comment/6269943"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703570642 {#4915
      date: 2023-12-26 07:04:02.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    > they cannot access the data from software because it is blocked by login screen\n
    \n
    The system may still be vulnerable to over the network exploits. So for example, if the system is running `sshd`, and a couple of months from now a root exploit is found (à la heartbleed), the attacker may get inside.\n
    \n
    It’s somewhat of a long shot, but it’s still a much larger attack surface than butting your head against a LUKS encrypted drive that’s at rest.\n
    \n
    > they cannot access the data from hardware because it is protected by FDE.\n
    \n
    RAM is not protected by FDE. There are (obviously non-trivial) ways to dump the RAM of a running system (Cold Boot attacks, and other forensic tools exist). So if the attacker is dedicated enough, there are ways.\n
    \n
    > One of the misconceptions I had before is that I assumed that the disk will be decrypted when you enter the LUKS password. This is not true, the password is loaded into the ram, and only decrypts necessary parts to RAM. All the data on the disk is never decrypted, even when you are working in your OS.\n
    \n
    Hah! That would be impractical :) Imagine having to decrypt your entire 32TB drive array everytime you booted your computer.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1703630441 {#4998
    date: 2023-12-26 23:40:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@baseless_discourse@mander.xyz"
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@baseless_discourse@mander.xyz"
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@baseless_discourse@mander.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5002 …}
  +nested: Doctrine\ORM\PersistentCollection {#5004 …}
  +votes: Doctrine\ORM\PersistentCollection {#5006 …}
  +reports: Doctrine\ORM\PersistentCollection {#5008 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5010 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5012 …}
  -id: 254906
  -bodyTs: "'32tb':205 'access':3,86 'array':207 'assum':146 'attack':51,69,120,129 'block':11 'boot':119,210 'but':72 'cannot':2,85 'cold':118 'comput':212 'coupl':37 'data':5,88,179 'decrypt':152,172,185,202 'dedic':131 'disk':149,182 'drive':79,206 'dump':111 'encrypt':78 'enough':132 'enter':155 'entir':204 'even':186 'everytim':208 'exampl':28 'exist':125 'exploit':25,44 'fde':96,102 'forens':123 'found':46 'get':53 'hah':194 'hardwar':90 'head':74 'heartble':49 'imagin':199 'impract':198 'insid':54 'la':48 'larger':68 'load':166 'login':13 'long':60 'luk':77,157 'may':17,52 'misconcept':139 'month':39 'much':67 'necessari':173 'network':24 'never':184 'non':107 'non-trivi':106 'obvious':105 'one':136 'os':193 'part':174 'password':158,164 'protect':94,100 'ram':97,113,169,176 'rest':83 'root':43 'run':33,116 'screen':14 'shot':61 'softwar':7 'somewhat':57 'sshd':34 'still':18,65 'surfac':70 'system':16,31,117 'tool':124 'trivial':108 'true':162 'vulner':20 'way':109,135 'work':190 'would':196 'à':47"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5581890"
  +editedAt: DateTimeImmutable @1708137349 {#4999
    date: 2024-02-17 03:35:49.0 +01:00
  }
  +createdAt: DateTimeImmutable @1703630441 {#5000
    date: 2023-12-26 23:40:41.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
72 DENIED moderate 
App\Entity\EntryComment {#5001
  +user: Proxies\__CG__\App\Entity\User {#4794 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4916
    +user: Proxies\__CG__\App\Entity\User {#4763 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4851
      +user: App\Entity\User {#4218 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4746
        +user: Proxies\__CG__\App\Entity\User {#4747 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: App\Entity\EntryComment {#4205
          +user: App\Entity\User {#4218 …}
          +entry: App\Entity\Entry {#2412}
          +magazine: App\Entity\Magazine {#264}
          +image: null
          +parent: null
          +root: null
          +body: """
            Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
            \n
            I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
            \n
            I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
            \n
            Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
            """
          +lang: "en"
          +isAdult: false
          +favouriteCount: 46
          +score: 0
          +lastActive: DateTime @1710417485 {#4200
            date: 2024-03-14 12:58:05.0 +01:00
          }
          +ip: null
          +tags: null
          +mentions: [
            "@j4k3@lemmy.world"
          ]
          +children: Doctrine\ORM\PersistentCollection {#4206 …}
          +nested: Doctrine\ORM\PersistentCollection {#4208 …}
          +votes: Doctrine\ORM\PersistentCollection {#4210 …}
          +reports: Doctrine\ORM\PersistentCollection {#4212 …}
          +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
          +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
          -id: 252174
          -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
          +ranking: 0
          +commentCount: 0
          +upVotes: 0
          +downVotes: 0
          +visibility: "visible             "
          +apId: "https://pawb.social/comment/4918875"
          +editedAt: null
          +createdAt: DateTimeImmutable @1703545288 {#4201
            date: 2023-12-26 00:01:28.0 +01:00
          }
        }
        +root: App\Entity\EntryComment {#4205}
        +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
        +lang: "en"
        +isAdult: false
        +favouriteCount: 15
        +score: 0
        +lastActive: DateTime @1703548351 {#4744
          date: 2023-12-26 00:52:31.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
          "@savvywolf@pawb.social"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4748 …}
        +nested: Doctrine\ORM\PersistentCollection {#4750 …}
        +votes: Doctrine\ORM\PersistentCollection {#4752 …}
        +reports: Doctrine\ORM\PersistentCollection {#4754 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
        -id: 252288
        -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://sh.itjust.works/comment/6839200"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703548351 {#4745
          date: 2023-12-26 00:52:31.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: """
        I’ve heard that before, but there are two main problems that stick out to me:\n
        \n
        - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
        - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
        \n
        I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 11
      +score: 0
      +lastActive: DateTime @1703552012 {#4852
        date: 2023-12-26 01:53:32.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
        "@wildbus8979@sh.itjust.works"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4846 …}
      +nested: Doctrine\ORM\PersistentCollection {#4840 …}
      +votes: Doctrine\ORM\PersistentCollection {#4844 …}
      +reports: Doctrine\ORM\PersistentCollection {#4855 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
      -id: 252387
      -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://pawb.social/comment/4919933"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703552012 {#4849
        date: 2023-12-26 01:53:32.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: """
      If the device is stolen, your disk is still encrypted at all time. If you believe your OS’s login system is reasonably secure, then the attacker should have no way to access your data: they cannot access the data from software because it is blocked by login screen, they cannot access the data from hardware because it is protected by FDE.\n
      \n
      One of the misconceptions I had before is that I assumed that the disk will be decrypted when you enter the LUKS password. This is not true, the password is loaded into the ram, and only decrypts necessary parts to RAM. All the data on the disk is never decrypted, even when you are working in your OS.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1703570642 {#4914
      date: 2023-12-26 07:04:02.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4917 …}
    +nested: Doctrine\ORM\PersistentCollection {#4919 …}
    +votes: Doctrine\ORM\PersistentCollection {#4921 …}
    +reports: Doctrine\ORM\PersistentCollection {#4923 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4925 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4927 …}
    -id: 254609
    -bodyTs: "'access':33,38,52 'assum':73 'attack':27 'believ':16 'block':46 'cannot':37,51 'data':35,40,54,106 'decrypt':79,99,112 'devic':3 'disk':7,76,109 'encrypt':10 'enter':82 'even':113 'fde':62 'hardwar':56 'load':93 'login':20,48 'luk':84 'misconcept':66 'necessari':100 'never':111 'one':63 'os':18,120 'part':101 'password':85,91 'protect':60 'ram':96,103 'reason':23 'screen':49 'secur':24 'softwar':42 'still':9 'stolen':5 'system':21 'time':13 'true':89 'way':31 'work':117"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://mander.xyz/comment/6269943"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703570642 {#4915
      date: 2023-12-26 07:04:02.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    > they cannot access the data from software because it is blocked by login screen\n
    \n
    The system may still be vulnerable to over the network exploits. So for example, if the system is running `sshd`, and a couple of months from now a root exploit is found (à la heartbleed), the attacker may get inside.\n
    \n
    It’s somewhat of a long shot, but it’s still a much larger attack surface than butting your head against a LUKS encrypted drive that’s at rest.\n
    \n
    > they cannot access the data from hardware because it is protected by FDE.\n
    \n
    RAM is not protected by FDE. There are (obviously non-trivial) ways to dump the RAM of a running system (Cold Boot attacks, and other forensic tools exist). So if the attacker is dedicated enough, there are ways.\n
    \n
    > One of the misconceptions I had before is that I assumed that the disk will be decrypted when you enter the LUKS password. This is not true, the password is loaded into the ram, and only decrypts necessary parts to RAM. All the data on the disk is never decrypted, even when you are working in your OS.\n
    \n
    Hah! That would be impractical :) Imagine having to decrypt your entire 32TB drive array everytime you booted your computer.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1703630441 {#4998
    date: 2023-12-26 23:40:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@baseless_discourse@mander.xyz"
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@baseless_discourse@mander.xyz"
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
    "@baseless_discourse@mander.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5002 …}
  +nested: Doctrine\ORM\PersistentCollection {#5004 …}
  +votes: Doctrine\ORM\PersistentCollection {#5006 …}
  +reports: Doctrine\ORM\PersistentCollection {#5008 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5010 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5012 …}
  -id: 254906
  -bodyTs: "'32tb':205 'access':3,86 'array':207 'assum':146 'attack':51,69,120,129 'block':11 'boot':119,210 'but':72 'cannot':2,85 'cold':118 'comput':212 'coupl':37 'data':5,88,179 'decrypt':152,172,185,202 'dedic':131 'disk':149,182 'drive':79,206 'dump':111 'encrypt':78 'enough':132 'enter':155 'entir':204 'even':186 'everytim':208 'exampl':28 'exist':125 'exploit':25,44 'fde':96,102 'forens':123 'found':46 'get':53 'hah':194 'hardwar':90 'head':74 'heartble':49 'imagin':199 'impract':198 'insid':54 'la':48 'larger':68 'load':166 'login':13 'long':60 'luk':77,157 'may':17,52 'misconcept':139 'month':39 'much':67 'necessari':173 'network':24 'never':184 'non':107 'non-trivi':106 'obvious':105 'one':136 'os':193 'part':174 'password':158,164 'protect':94,100 'ram':97,113,169,176 'rest':83 'root':43 'run':33,116 'screen':14 'shot':61 'softwar':7 'somewhat':57 'sshd':34 'still':18,65 'surfac':70 'system':16,31,117 'tool':124 'trivial':108 'true':162 'vulner':20 'way':109,135 'work':190 'would':196 'à':47"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.nl/comment/5581890"
  +editedAt: DateTimeImmutable @1708137349 {#4999
    date: 2024-02-17 03:35:49.0 +01:00
  }
  +createdAt: DateTimeImmutable @1703630441 {#5000
    date: 2023-12-26 23:40:41.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
73 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
74 DENIED moderate 
App\Entity\EntryComment {#4931
  +user: Proxies\__CG__\App\Entity\User {#4932 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4851
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4746
      +user: Proxies\__CG__\App\Entity\User {#4747 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4205
        +user: App\Entity\User {#4218 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: """
          Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
          \n
          I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
          \n
          I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
          \n
          Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 46
        +score: 0
        +lastActive: DateTime @1710417485 {#4200
          date: 2024-03-14 12:58:05.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4206 …}
        +nested: Doctrine\ORM\PersistentCollection {#4208 …}
        +votes: Doctrine\ORM\PersistentCollection {#4210 …}
        +reports: Doctrine\ORM\PersistentCollection {#4212 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
        -id: 252174
        -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://pawb.social/comment/4918875"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703545288 {#4201
          date: 2023-12-26 00:01:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 15
      +score: 0
      +lastActive: DateTime @1703548351 {#4744
        date: 2023-12-26 00:52:31.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4748 …}
      +nested: Doctrine\ORM\PersistentCollection {#4750 …}
      +votes: Doctrine\ORM\PersistentCollection {#4752 …}
      +reports: Doctrine\ORM\PersistentCollection {#4754 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
      -id: 252288
      -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/6839200"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703548351 {#4745
        date: 2023-12-26 00:52:31.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: """
      I’ve heard that before, but there are two main problems that stick out to me:\n
      \n
      - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
      - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
      \n
      I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 11
    +score: 0
    +lastActive: DateTime @1703552012 {#4852
      date: 2023-12-26 01:53:32.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4846 …}
    +nested: Doctrine\ORM\PersistentCollection {#4840 …}
    +votes: Doctrine\ORM\PersistentCollection {#4844 …}
    +reports: Doctrine\ORM\PersistentCollection {#4855 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
    -id: 252387
    -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4919933"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703552012 {#4849
      date: 2023-12-26 01:53:32.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    While I don’t use TPM myself (I dislike being tied to a specific hardware) the way it protects you is:\n
    \n
    Disk is protected through encryption, so you can’t remove and inject anything/hack the password.\n
    \n
    If boot is protected/signed/authorized only, a random person can’t load an external OS and modify the disk either.\n
    \n
    All this together would say, even if someone acquires your computer, they can’t do anything to it without an account with access, or an exploit that works before a user logs.\n
    \n
    In a way, the attack surface can be bigger than if you simply encrypted your disk with a key and password protect that key.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1703561785 {#4929
    date: 2023-12-26 04:36:25.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4933 …}
  +nested: Doctrine\ORM\PersistentCollection {#4935 …}
  +votes: Doctrine\ORM\PersistentCollection {#4937 …}
  +reports: Doctrine\ORM\PersistentCollection {#4939 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4941 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4943 …}
  -id: 270742
  -bodyTs: "'access':78 'account':76 'acquir':64 'anyth':71 'anything/hack':34 'attack':92 'bigger':96 'boot':38 'comput':66 'disk':22,54,103 'dislik':9 'either':55 'encrypt':26,101 'even':61 'exploit':81 'extern':49 'hardwar':15 'inject':33 'key':106,111 'load':47 'log':87 'modifi':52 'os':50 'password':36,108 'person':44 'protect':19,24,109 'protected/signed/authorized':40 'random':43 'remov':31 'say':60 'simpli':100 'someon':63 'specif':14 'surfac':93 'tie':11 'togeth':58 'tpm':6 'use':5 'user':86 'way':17,90 'without':74 'work':83 'would':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7594991"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703561785 {#4930
    date: 2023-12-26 04:36:25.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
75 DENIED edit 
App\Entity\EntryComment {#4931
  +user: Proxies\__CG__\App\Entity\User {#4932 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4851
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4746
      +user: Proxies\__CG__\App\Entity\User {#4747 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4205
        +user: App\Entity\User {#4218 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: """
          Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
          \n
          I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
          \n
          I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
          \n
          Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 46
        +score: 0
        +lastActive: DateTime @1710417485 {#4200
          date: 2024-03-14 12:58:05.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4206 …}
        +nested: Doctrine\ORM\PersistentCollection {#4208 …}
        +votes: Doctrine\ORM\PersistentCollection {#4210 …}
        +reports: Doctrine\ORM\PersistentCollection {#4212 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
        -id: 252174
        -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://pawb.social/comment/4918875"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703545288 {#4201
          date: 2023-12-26 00:01:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 15
      +score: 0
      +lastActive: DateTime @1703548351 {#4744
        date: 2023-12-26 00:52:31.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4748 …}
      +nested: Doctrine\ORM\PersistentCollection {#4750 …}
      +votes: Doctrine\ORM\PersistentCollection {#4752 …}
      +reports: Doctrine\ORM\PersistentCollection {#4754 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
      -id: 252288
      -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/6839200"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703548351 {#4745
        date: 2023-12-26 00:52:31.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: """
      I’ve heard that before, but there are two main problems that stick out to me:\n
      \n
      - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
      - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
      \n
      I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 11
    +score: 0
    +lastActive: DateTime @1703552012 {#4852
      date: 2023-12-26 01:53:32.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4846 …}
    +nested: Doctrine\ORM\PersistentCollection {#4840 …}
    +votes: Doctrine\ORM\PersistentCollection {#4844 …}
    +reports: Doctrine\ORM\PersistentCollection {#4855 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
    -id: 252387
    -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4919933"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703552012 {#4849
      date: 2023-12-26 01:53:32.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    While I don’t use TPM myself (I dislike being tied to a specific hardware) the way it protects you is:\n
    \n
    Disk is protected through encryption, so you can’t remove and inject anything/hack the password.\n
    \n
    If boot is protected/signed/authorized only, a random person can’t load an external OS and modify the disk either.\n
    \n
    All this together would say, even if someone acquires your computer, they can’t do anything to it without an account with access, or an exploit that works before a user logs.\n
    \n
    In a way, the attack surface can be bigger than if you simply encrypted your disk with a key and password protect that key.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1703561785 {#4929
    date: 2023-12-26 04:36:25.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4933 …}
  +nested: Doctrine\ORM\PersistentCollection {#4935 …}
  +votes: Doctrine\ORM\PersistentCollection {#4937 …}
  +reports: Doctrine\ORM\PersistentCollection {#4939 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4941 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4943 …}
  -id: 270742
  -bodyTs: "'access':78 'account':76 'acquir':64 'anyth':71 'anything/hack':34 'attack':92 'bigger':96 'boot':38 'comput':66 'disk':22,54,103 'dislik':9 'either':55 'encrypt':26,101 'even':61 'exploit':81 'extern':49 'hardwar':15 'inject':33 'key':106,111 'load':47 'log':87 'modifi':52 'os':50 'password':36,108 'person':44 'protect':19,24,109 'protected/signed/authorized':40 'random':43 'remov':31 'say':60 'simpli':100 'someon':63 'specif':14 'surfac':93 'tie':11 'togeth':58 'tpm':6 'use':5 'user':86 'way':17,90 'without':74 'work':83 'would':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7594991"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703561785 {#4930
    date: 2023-12-26 04:36:25.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
76 DENIED moderate 
App\Entity\EntryComment {#4931
  +user: Proxies\__CG__\App\Entity\User {#4932 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4851
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4746
      +user: Proxies\__CG__\App\Entity\User {#4747 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: App\Entity\EntryComment {#4205
        +user: App\Entity\User {#4218 …}
        +entry: App\Entity\Entry {#2412}
        +magazine: App\Entity\Magazine {#264}
        +image: null
        +parent: null
        +root: null
        +body: """
          Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
          \n
          I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
          \n
          I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
          \n
          Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 46
        +score: 0
        +lastActive: DateTime @1710417485 {#4200
          date: 2024-03-14 12:58:05.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@j4k3@lemmy.world"
        ]
        +children: Doctrine\ORM\PersistentCollection {#4206 …}
        +nested: Doctrine\ORM\PersistentCollection {#4208 …}
        +votes: Doctrine\ORM\PersistentCollection {#4210 …}
        +reports: Doctrine\ORM\PersistentCollection {#4212 …}
        +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
        +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
        -id: 252174
        -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://pawb.social/comment/4918875"
        +editedAt: null
        +createdAt: DateTimeImmutable @1703545288 {#4201
          date: 2023-12-26 00:01:28.0 +01:00
        }
      }
      +root: App\Entity\EntryComment {#4205}
      +body: "In theory, the TPM can be used to verify that the bootloader, kernel and injtamfs haven’t been tampered with, which is very very useful as FDE (in the running machine) is only good if that remains true."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 15
      +score: 0
      +lastActive: DateTime @1703548351 {#4744
        date: 2023-12-26 00:52:31.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
        "@savvywolf@pawb.social"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4748 …}
      +nested: Doctrine\ORM\PersistentCollection {#4750 …}
      +votes: Doctrine\ORM\PersistentCollection {#4752 …}
      +reports: Doctrine\ORM\PersistentCollection {#4754 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4756 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4758 …}
      -id: 252288
      -bodyTs: "'bootload':12 'fde':27 'good':34 'haven':16 'injtamf':15 'kernel':13 'machin':31 'remain':37 'run':30 'tamper':19 'theori':2 'tpm':4 'true':38 'use':7,25 'verifi':9"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://sh.itjust.works/comment/6839200"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703548351 {#4745
        date: 2023-12-26 00:52:31.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4205}
    +body: """
      I’ve heard that before, but there are two main problems that stick out to me:\n
      \n
      - A lot of the marketing for TPM (at least when I was setting up bitlocker on Windows) suggests that it’s used to support decrypting drives without a password on boot. But that doesn’t seem to offer any protection from the devices being stolen. The bootloader may be safe but it’s not actually verifying that I’m the one booting the device.\n
      - I can’t think of a situation where someone would be able to actually modify the bootloader without also having full access to the files and secrets. Especially in a single-boot environment where every time the system is running, the device is decrypted.\n
      \n
      I’m not saying that it’s all just a scam or anything like that, but it really feels like I’m missing something important and obvious.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 11
    +score: 0
    +lastActive: DateTime @1703552012 {#4852
      date: 2023-12-26 01:53:32.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@savvywolf@pawb.social"
      "@wildbus8979@sh.itjust.works"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4846 …}
    +nested: Doctrine\ORM\PersistentCollection {#4840 …}
    +votes: Doctrine\ORM\PersistentCollection {#4844 …}
    +reports: Doctrine\ORM\PersistentCollection {#4855 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4857 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4859 …}
    -id: 252387
    -bodyTs: "'abl':92 'access':102 'actual':71,94 'also':99 'anyth':138 'bitlock':31 'boot':47,78,113 'bootload':63,97 'decrypt':41,125 'devic':59,80,123 'doesn':50 'drive':42 'environ':114 'especi':108 'everi':116 'feel':144 'file':105 'full':101 'heard':3 'import':150 'least':25 'like':139,145 'lot':18 'm':75,127,147 'main':10 'market':21 'may':64 'miss':148 'modifi':95 'obvious':152 'offer':54 'one':77 'password':45 'problem':11 'protect':56 'realli':143 'run':121 'safe':66 'say':129 'scam':136 'secret':107 'seem':52 'set':29 'singl':112 'single-boot':111 'situat':87 'someon':89 'someth':149 'stick':13 'stolen':61 'suggest':34 'support':40 'system':119 'think':84 'time':117 'tpm':23 'two':9 'use':38 've':2 'verifi':72 'window':33 'without':43,98 'would':90"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4919933"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703552012 {#4849
      date: 2023-12-26 01:53:32.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    While I don’t use TPM myself (I dislike being tied to a specific hardware) the way it protects you is:\n
    \n
    Disk is protected through encryption, so you can’t remove and inject anything/hack the password.\n
    \n
    If boot is protected/signed/authorized only, a random person can’t load an external OS and modify the disk either.\n
    \n
    All this together would say, even if someone acquires your computer, they can’t do anything to it without an account with access, or an exploit that works before a user logs.\n
    \n
    In a way, the attack surface can be bigger than if you simply encrypted your disk with a key and password protect that key.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1703561785 {#4929
    date: 2023-12-26 04:36:25.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
    "@wildbus8979@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4933 …}
  +nested: Doctrine\ORM\PersistentCollection {#4935 …}
  +votes: Doctrine\ORM\PersistentCollection {#4937 …}
  +reports: Doctrine\ORM\PersistentCollection {#4939 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4941 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4943 …}
  -id: 270742
  -bodyTs: "'access':78 'account':76 'acquir':64 'anyth':71 'anything/hack':34 'attack':92 'bigger':96 'boot':38 'comput':66 'disk':22,54,103 'dislik':9 'either':55 'encrypt':26,101 'even':61 'exploit':81 'extern':49 'hardwar':15 'inject':33 'key':106,111 'load':47 'log':87 'modifi':52 'os':50 'password':36,108 'person':44 'protect':19,24,109 'protected/signed/authorized':40 'random':43 'remov':31 'say':60 'simpli':100 'someon':63 'specif':14 'surfac':93 'tie':11 'togeth':58 'tpm':6 'use':5 'user':86 'way':17,90 'without':74 'work':83 'would':59"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7594991"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703561785 {#4930
    date: 2023-12-26 04:36:25.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
77 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
78 DENIED moderate 
App\Entity\EntryComment {#4762
  +user: Proxies\__CG__\App\Entity\User {#4763 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4205
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
      \n
      I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
      \n
      I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
      \n
      Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 46
    +score: 0
    +lastActive: DateTime @1710417485 {#4200
      date: 2024-03-14 12:58:05.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4206 …}
    +nested: Doctrine\ORM\PersistentCollection {#4208 …}
    +votes: Doctrine\ORM\PersistentCollection {#4210 …}
    +reports: Doctrine\ORM\PersistentCollection {#4212 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
    -id: 252174
    -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4918875"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703545288 {#4201
      date: 2023-12-26 00:01:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    The key is only released into ram, so unless the thief can read content from ram they cannot easily decrypt your disk. And most common thief probably do not have that ability.\n
    \n
    That being said, you do need a login password to prevent the thief straight up booting into your OS and copy everything using the file manager…\n
    \n
    One of the advantage of using TPM with FDE, is that you can use a much longer random password. If I dont use TPM I am forced to use a password I can remember, which is likely the same password I use somewhere else. This means if someone close to me stole my laptop, they will have reasonable chance of guessing my password.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1703602903 {#4760
    date: 2023-12-26 16:01:43.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4764 …}
  +nested: Doctrine\ORM\PersistentCollection {#4766 …}
  +votes: Doctrine\ORM\PersistentCollection {#4768 …}
  +reports: Doctrine\ORM\PersistentCollection {#4770 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4772 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4774 …}
  -id: 254611
  -bodyTs: "'abil':32 'advantag':62 'boot':48 'cannot':18 'chanc':117 'close':107 'common':25 'content':14 'copi':53 'decrypt':20 'disk':22 'dont':80 'easili':19 'els':102 'everyth':54 'fde':67 'file':57 'forc':85 'guess':119 'key':2 'laptop':112 'like':95 'login':40 'longer':75 'manag':58 'mean':104 'much':74 'need':38 'one':59 'os':51 'password':41,77,89,98,121 'prevent':43 'probabl':27 'ram':7,16 'random':76 'read':13 'reason':116 'releas':5 'rememb':92 'said':35 'someon':106 'somewher':101 'stole':110 'straight':46 'thief':11,26,45 'tpm':65,82 'unless':9 'use':55,64,72,81,87,100"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://mander.xyz/comment/6275007"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703602903 {#4761
    date: 2023-12-26 16:01:43.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
79 DENIED edit 
App\Entity\EntryComment {#4762
  +user: Proxies\__CG__\App\Entity\User {#4763 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4205
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
      \n
      I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
      \n
      I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
      \n
      Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 46
    +score: 0
    +lastActive: DateTime @1710417485 {#4200
      date: 2024-03-14 12:58:05.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4206 …}
    +nested: Doctrine\ORM\PersistentCollection {#4208 …}
    +votes: Doctrine\ORM\PersistentCollection {#4210 …}
    +reports: Doctrine\ORM\PersistentCollection {#4212 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
    -id: 252174
    -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4918875"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703545288 {#4201
      date: 2023-12-26 00:01:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    The key is only released into ram, so unless the thief can read content from ram they cannot easily decrypt your disk. And most common thief probably do not have that ability.\n
    \n
    That being said, you do need a login password to prevent the thief straight up booting into your OS and copy everything using the file manager…\n
    \n
    One of the advantage of using TPM with FDE, is that you can use a much longer random password. If I dont use TPM I am forced to use a password I can remember, which is likely the same password I use somewhere else. This means if someone close to me stole my laptop, they will have reasonable chance of guessing my password.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1703602903 {#4760
    date: 2023-12-26 16:01:43.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4764 …}
  +nested: Doctrine\ORM\PersistentCollection {#4766 …}
  +votes: Doctrine\ORM\PersistentCollection {#4768 …}
  +reports: Doctrine\ORM\PersistentCollection {#4770 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4772 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4774 …}
  -id: 254611
  -bodyTs: "'abil':32 'advantag':62 'boot':48 'cannot':18 'chanc':117 'close':107 'common':25 'content':14 'copi':53 'decrypt':20 'disk':22 'dont':80 'easili':19 'els':102 'everyth':54 'fde':67 'file':57 'forc':85 'guess':119 'key':2 'laptop':112 'like':95 'login':40 'longer':75 'manag':58 'mean':104 'much':74 'need':38 'one':59 'os':51 'password':41,77,89,98,121 'prevent':43 'probabl':27 'ram':7,16 'random':76 'read':13 'reason':116 'releas':5 'rememb':92 'said':35 'someon':106 'somewher':101 'stole':110 'straight':46 'thief':11,26,45 'tpm':65,82 'unless':9 'use':55,64,72,81,87,100"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://mander.xyz/comment/6275007"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703602903 {#4761
    date: 2023-12-26 16:01:43.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
80 DENIED moderate 
App\Entity\EntryComment {#4762
  +user: Proxies\__CG__\App\Entity\User {#4763 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4205
    +user: App\Entity\User {#4218 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      Personally, I don’t see how a TPM module is more useful than full disk encryption with a password you enter on boot.\n
      \n
      I struggle to see how it makes automatic login safer given it does nothing to protect against the really common threat of someone physically stealing your laptop or desktop.\n
      \n
      I don’t trust any encryption or authentication system that I don’t have access to the keys for. Microsoft has also kinda made me feel it’s more for vendor lock in, like they did with secure boot.\n
      \n
      Still, I’m probably being unreasonably pessimistic about it though - be interested to see any practical use cases of it.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 46
    +score: 0
    +lastActive: DateTime @1710417485 {#4200
      date: 2024-03-14 12:58:05.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4206 …}
    +nested: Doctrine\ORM\PersistentCollection {#4208 …}
    +votes: Doctrine\ORM\PersistentCollection {#4210 …}
    +reports: Doctrine\ORM\PersistentCollection {#4212 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4214 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4216 …}
    -id: 252174
    -bodyTs: "'access':67 'also':74 'authent':60 'automat':31 'boot':23,91 'case':109 'common':43 'desktop':52 'disk':15 'encrypt':16,58 'enter':21 'feel':78 'full':14 'given':34 'interest':103 'key':70 'kinda':75 'laptop':50 'like':86 'lock':84 'login':32 'm':94 'made':76 'make':30 'microsoft':72 'modul':9 'noth':37 'password':19 'person':1 'pessimist':98 'physic':47 'practic':107 'probabl':95 'protect':39 'realli':42 'safer':33 'secur':90 'see':5,27,105 'someon':46 'steal':48 'still':92 'struggl':25 'system':61 'though':101 'threat':44 'tpm':8 'trust':56 'unreason':97 'use':12,108 'vendor':83"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://pawb.social/comment/4918875"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703545288 {#4201
      date: 2023-12-26 00:01:28.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4205}
  +body: """
    The key is only released into ram, so unless the thief can read content from ram they cannot easily decrypt your disk. And most common thief probably do not have that ability.\n
    \n
    That being said, you do need a login password to prevent the thief straight up booting into your OS and copy everything using the file manager…\n
    \n
    One of the advantage of using TPM with FDE, is that you can use a much longer random password. If I dont use TPM I am forced to use a password I can remember, which is likely the same password I use somewhere else. This means if someone close to me stole my laptop, they will have reasonable chance of guessing my password.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1703602903 {#4760
    date: 2023-12-26 16:01:43.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@savvywolf@pawb.social"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4764 …}
  +nested: Doctrine\ORM\PersistentCollection {#4766 …}
  +votes: Doctrine\ORM\PersistentCollection {#4768 …}
  +reports: Doctrine\ORM\PersistentCollection {#4770 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4772 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4774 …}
  -id: 254611
  -bodyTs: "'abil':32 'advantag':62 'boot':48 'cannot':18 'chanc':117 'close':107 'common':25 'content':14 'copi':53 'decrypt':20 'disk':22 'dont':80 'easili':19 'els':102 'everyth':54 'fde':67 'file':57 'forc':85 'guess':119 'key':2 'laptop':112 'like':95 'login':40 'longer':75 'manag':58 'mean':104 'much':74 'need':38 'one':59 'os':51 'password':41,77,89,98,121 'prevent':43 'probabl':27 'ram':7,16 'random':76 'read':13 'reason':116 'releas':5 'rememb':92 'said':35 'someon':106 'somewher':101 'stole':110 'straight':46 'thief':11,26,45 'tpm':65,82 'unless':9 'use':55,64,72,81,87,100"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://mander.xyz/comment/6275007"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703602903 {#4761
    date: 2023-12-26 16:01:43.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
81 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
82 DENIED moderate 
App\Entity\EntryComment {#4279
  +user: App\Entity\User {#4292 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Usually because its not portable. A USB security key costs more than the TPM you already have, but you can make a backup and store it in a safe"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1703543638 {#4274
    date: 2023-12-25 23:33:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4280 …}
  +nested: Doctrine\ORM\PersistentCollection {#4282 …}
  +votes: Doctrine\ORM\PersistentCollection {#4284 …}
  +reports: Doctrine\ORM\PersistentCollection {#4286 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4288 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4290 …}
  -id: 252124
  -bodyTs: "'alreadi':16 'backup':23 'cost':10 'key':9 'make':21 'portabl':5 'safe':29 'secur':8 'store':25 'tpm':14 'usb':7 'usual':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://monyet.cc/comment/4048410"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703543638 {#4275
    date: 2023-12-25 23:33:58.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
83 DENIED edit 
App\Entity\EntryComment {#4279
  +user: App\Entity\User {#4292 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Usually because its not portable. A USB security key costs more than the TPM you already have, but you can make a backup and store it in a safe"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1703543638 {#4274
    date: 2023-12-25 23:33:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4280 …}
  +nested: Doctrine\ORM\PersistentCollection {#4282 …}
  +votes: Doctrine\ORM\PersistentCollection {#4284 …}
  +reports: Doctrine\ORM\PersistentCollection {#4286 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4288 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4290 …}
  -id: 252124
  -bodyTs: "'alreadi':16 'backup':23 'cost':10 'key':9 'make':21 'portabl':5 'safe':29 'secur':8 'store':25 'tpm':14 'usb':7 'usual':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://monyet.cc/comment/4048410"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703543638 {#4275
    date: 2023-12-25 23:33:58.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
84 DENIED moderate 
App\Entity\EntryComment {#4279
  +user: App\Entity\User {#4292 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Usually because its not portable. A USB security key costs more than the TPM you already have, but you can make a backup and store it in a safe"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1703543638 {#4274
    date: 2023-12-25 23:33:58.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4280 …}
  +nested: Doctrine\ORM\PersistentCollection {#4282 …}
  +votes: Doctrine\ORM\PersistentCollection {#4284 …}
  +reports: Doctrine\ORM\PersistentCollection {#4286 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4288 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4290 …}
  -id: 252124
  -bodyTs: "'alreadi':16 'backup':23 'cost':10 'key':9 'make':21 'portabl':5 'safe':29 'secur':8 'store':25 'tpm':14 'usb':7 'usual':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://monyet.cc/comment/4048410"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703543638 {#4275
    date: 2023-12-25 23:33:58.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
85 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
86 DENIED moderate 
App\Entity\EntryComment {#4353
  +user: App\Entity\User {#4366 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "I use it for [Data-at-rest Encryption](https://wiki.archlinux.org/title/Data-at-rest_encryption). Not much else though."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1703540506 {#4348
    date: 2023-12-25 22:41:46.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4354 …}
  +nested: Doctrine\ORM\PersistentCollection {#4356 …}
  +votes: Doctrine\ORM\PersistentCollection {#4358 …}
  +reports: Doctrine\ORM\PersistentCollection {#4360 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4362 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4364 …}
  -id: 251972
  -bodyTs: "'/title/data-at-rest_encryption).':12 'data':6 'data-at-rest':5 'els':15 'encrypt':9 'much':14 'rest':8 'though':16 'use':2 'wiki.archlinux.org':11 'wiki.archlinux.org/title/data-at-rest_encryption).':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6240511"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703540506 {#4349
    date: 2023-12-25 22:41:46.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
87 DENIED edit 
App\Entity\EntryComment {#4353
  +user: App\Entity\User {#4366 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "I use it for [Data-at-rest Encryption](https://wiki.archlinux.org/title/Data-at-rest_encryption). Not much else though."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1703540506 {#4348
    date: 2023-12-25 22:41:46.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4354 …}
  +nested: Doctrine\ORM\PersistentCollection {#4356 …}
  +votes: Doctrine\ORM\PersistentCollection {#4358 …}
  +reports: Doctrine\ORM\PersistentCollection {#4360 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4362 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4364 …}
  -id: 251972
  -bodyTs: "'/title/data-at-rest_encryption).':12 'data':6 'data-at-rest':5 'els':15 'encrypt':9 'much':14 'rest':8 'though':16 'use':2 'wiki.archlinux.org':11 'wiki.archlinux.org/title/data-at-rest_encryption).':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6240511"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703540506 {#4349
    date: 2023-12-25 22:41:46.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
88 DENIED moderate 
App\Entity\EntryComment {#4353
  +user: App\Entity\User {#4366 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "I use it for [Data-at-rest Encryption](https://wiki.archlinux.org/title/Data-at-rest_encryption). Not much else though."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1703540506 {#4348
    date: 2023-12-25 22:41:46.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4354 …}
  +nested: Doctrine\ORM\PersistentCollection {#4356 …}
  +votes: Doctrine\ORM\PersistentCollection {#4358 …}
  +reports: Doctrine\ORM\PersistentCollection {#4360 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4362 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4364 …}
  -id: 251972
  -bodyTs: "'/title/data-at-rest_encryption).':12 'data':6 'data-at-rest':5 'els':15 'encrypt':9 'much':14 'rest':8 'though':16 'use':2 'wiki.archlinux.org':11 'wiki.archlinux.org/title/data-at-rest_encryption).':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6240511"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703540506 {#4349
    date: 2023-12-25 22:41:46.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
89 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
90 DENIED moderate 
App\Entity\EntryComment {#4427
  +user: App\Entity\User {#4440 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "i use it to auto unlock luks. if someone messed with the hardware/ bios, it will ask for the password next boot."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703539949 {#4422
    date: 2023-12-25 22:32:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4428 …}
  +nested: Doctrine\ORM\PersistentCollection {#4430 …}
  +votes: Doctrine\ORM\PersistentCollection {#4432 …}
  +reports: Doctrine\ORM\PersistentCollection {#4434 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4436 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4438 …}
  -id: 270355
  -bodyTs: "'ask':17 'auto':5 'bio':14 'boot':22 'hardwar':13 'luk':7 'mess':10 'next':21 'password':20 'someon':9 'unlock':6 'use':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7587460"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703539949 {#4423
    date: 2023-12-25 22:32:29.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
91 DENIED edit 
App\Entity\EntryComment {#4427
  +user: App\Entity\User {#4440 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "i use it to auto unlock luks. if someone messed with the hardware/ bios, it will ask for the password next boot."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703539949 {#4422
    date: 2023-12-25 22:32:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4428 …}
  +nested: Doctrine\ORM\PersistentCollection {#4430 …}
  +votes: Doctrine\ORM\PersistentCollection {#4432 …}
  +reports: Doctrine\ORM\PersistentCollection {#4434 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4436 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4438 …}
  -id: 270355
  -bodyTs: "'ask':17 'auto':5 'bio':14 'boot':22 'hardwar':13 'luk':7 'mess':10 'next':21 'password':20 'someon':9 'unlock':6 'use':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7587460"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703539949 {#4423
    date: 2023-12-25 22:32:29.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
92 DENIED moderate 
App\Entity\EntryComment {#4427
  +user: App\Entity\User {#4440 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "i use it to auto unlock luks. if someone messed with the hardware/ bios, it will ask for the password next boot."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703539949 {#4422
    date: 2023-12-25 22:32:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4428 …}
  +nested: Doctrine\ORM\PersistentCollection {#4430 …}
  +votes: Doctrine\ORM\PersistentCollection {#4432 …}
  +reports: Doctrine\ORM\PersistentCollection {#4434 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4436 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4438 …}
  -id: 270355
  -bodyTs: "'ask':17 'auto':5 'bio':14 'boot':22 'hardwar':13 'luk':7 'mess':10 'next':21 'password':20 'someon':9 'unlock':6 'use':2"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7587460"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703539949 {#4423
    date: 2023-12-25 22:32:29.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
93 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
94 DENIED moderate 
App\Entity\EntryComment {#4500
  +user: App\Entity\User {#4513 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    The problem with this is that the key would be “machine based” and not “person”\n
    \n
    So it’s better for “service accounts”
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1707794904 {#4495
    date: 2024-02-13 04:28:24.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4501 …}
  +nested: Doctrine\ORM\PersistentCollection {#4503 …}
  +votes: Doctrine\ORM\PersistentCollection {#4505 …}
  +reports: Doctrine\ORM\PersistentCollection {#4507 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4509 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4511 …}
  -id: 251926
  -bodyTs: "'account':22 'base':12 'better':19 'key':8 'machin':11 'person':15 'problem':2 'servic':21 'would':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6240305"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703539326 {#4496
    date: 2023-12-25 22:22:06.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
95 DENIED edit 
App\Entity\EntryComment {#4500
  +user: App\Entity\User {#4513 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    The problem with this is that the key would be “machine based” and not “person”\n
    \n
    So it’s better for “service accounts”
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1707794904 {#4495
    date: 2024-02-13 04:28:24.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4501 …}
  +nested: Doctrine\ORM\PersistentCollection {#4503 …}
  +votes: Doctrine\ORM\PersistentCollection {#4505 …}
  +reports: Doctrine\ORM\PersistentCollection {#4507 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4509 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4511 …}
  -id: 251926
  -bodyTs: "'account':22 'base':12 'better':19 'key':8 'machin':11 'person':15 'problem':2 'servic':21 'would':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6240305"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703539326 {#4496
    date: 2023-12-25 22:22:06.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
96 DENIED moderate 
App\Entity\EntryComment {#4500
  +user: App\Entity\User {#4513 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    The problem with this is that the key would be “machine based” and not “person”\n
    \n
    So it’s better for “service accounts”
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1707794904 {#4495
    date: 2024-02-13 04:28:24.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4501 …}
  +nested: Doctrine\ORM\PersistentCollection {#4503 …}
  +votes: Doctrine\ORM\PersistentCollection {#4505 …}
  +reports: Doctrine\ORM\PersistentCollection {#4507 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4509 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4511 …}
  -id: 251926
  -bodyTs: "'account':22 'base':12 'better':19 'key':8 'machin':11 'person':15 'problem':2 'servic':21 'would':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/6240305"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703539326 {#4496
    date: 2023-12-25 22:22:06.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
97 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
98 DENIED moderate 
App\Entity\EntryComment {#4729
  +user: Proxies\__CG__\App\Entity\User {#4730 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4500
    +user: App\Entity\User {#4513 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      The problem with this is that the key would be “machine based” and not “person”\n
      \n
      So it’s better for “service accounts”
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1707794904 {#4495
      date: 2024-02-13 04:28:24.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4501 …}
    +nested: Doctrine\ORM\PersistentCollection {#4503 …}
    +votes: Doctrine\ORM\PersistentCollection {#4505 …}
    +reports: Doctrine\ORM\PersistentCollection {#4507 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4509 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4511 …}
    -id: 251926
    -bodyTs: "'account':22 'base':12 'better':19 'key':8 'machin':11 'person':15 'problem':2 'servic':21 'would':9"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6240305"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703539326 {#4496
      date: 2023-12-25 22:22:06.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4500}
  +body: """
    Having read poetterings blog posts a bit and he explains that the TPM2 based encryption is entirely just for system resources (basically everything under `/` with exception of `/home`). For home he still “envisions” (its already possible and not really hard with sd-homed) that the encryption is based on the users passphrase/key/whatever and not unlockable by anyone else than the users passphrase/…\n
    \n
    So user specific stuff is tied to user keys while system stuff is tied to the system & OS.  \n
    If you wanna read the post: [0pointer.net/…/fitting-everything-together.html](https://0pointer.net/blog/fitting-everything-together.html)
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1703547405 {#4722
    date: 2023-12-26 00:36:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@ArbiterXero@lemmy.world"
    "@j4k3@lemmy.world"
    "@ArbiterXero@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4731 …}
  +nested: Doctrine\ORM\PersistentCollection {#4733 …}
  +votes: Doctrine\ORM\PersistentCollection {#4736 …}
  +reports: Doctrine\ORM\PersistentCollection {#4738 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4740 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4742 …}
  -id: 252251
  -bodyTs: "'/blog/fitting-everything-together.html)':92 '/fitting-everything-together.html':89 '/home':28 '0pointer.net':88,91 '0pointer.net/blog/fitting-everything-together.html)':90 'alreadi':35 'anyon':58 'base':14,49 'basic':22 'bit':7 'blog':4 'els':59 'encrypt':15,47 'entir':17 'envis':33 'everyth':23 'except':26 'explain':10 'hard':40 'home':30,44 'key':72 'os':81 'passphras':63 'passphrase/key/whatever':53 'poetter':3 'possibl':36 'post':5,87 'read':2,85 'realli':39 'resourc':21 'sd':43 'sd-home':42 'specif':66 'still':32 'stuff':67,75 'system':20,74,80 'tie':69,77 'tpm2':13 'unlock':56 'user':52,62,65,71 'wanna':84"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5942834"
  +editedAt: DateTimeImmutable @1707795007 {#4725
    date: 2024-02-13 04:30:07.0 +01:00
  }
  +createdAt: DateTimeImmutable @1703547405 {#4723
    date: 2023-12-26 00:36:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
99 DENIED edit 
App\Entity\EntryComment {#4729
  +user: Proxies\__CG__\App\Entity\User {#4730 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4500
    +user: App\Entity\User {#4513 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      The problem with this is that the key would be “machine based” and not “person”\n
      \n
      So it’s better for “service accounts”
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1707794904 {#4495
      date: 2024-02-13 04:28:24.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4501 …}
    +nested: Doctrine\ORM\PersistentCollection {#4503 …}
    +votes: Doctrine\ORM\PersistentCollection {#4505 …}
    +reports: Doctrine\ORM\PersistentCollection {#4507 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4509 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4511 …}
    -id: 251926
    -bodyTs: "'account':22 'base':12 'better':19 'key':8 'machin':11 'person':15 'problem':2 'servic':21 'would':9"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6240305"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703539326 {#4496
      date: 2023-12-25 22:22:06.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4500}
  +body: """
    Having read poetterings blog posts a bit and he explains that the TPM2 based encryption is entirely just for system resources (basically everything under `/` with exception of `/home`). For home he still “envisions” (its already possible and not really hard with sd-homed) that the encryption is based on the users passphrase/key/whatever and not unlockable by anyone else than the users passphrase/…\n
    \n
    So user specific stuff is tied to user keys while system stuff is tied to the system & OS.  \n
    If you wanna read the post: [0pointer.net/…/fitting-everything-together.html](https://0pointer.net/blog/fitting-everything-together.html)
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1703547405 {#4722
    date: 2023-12-26 00:36:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@ArbiterXero@lemmy.world"
    "@j4k3@lemmy.world"
    "@ArbiterXero@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4731 …}
  +nested: Doctrine\ORM\PersistentCollection {#4733 …}
  +votes: Doctrine\ORM\PersistentCollection {#4736 …}
  +reports: Doctrine\ORM\PersistentCollection {#4738 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4740 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4742 …}
  -id: 252251
  -bodyTs: "'/blog/fitting-everything-together.html)':92 '/fitting-everything-together.html':89 '/home':28 '0pointer.net':88,91 '0pointer.net/blog/fitting-everything-together.html)':90 'alreadi':35 'anyon':58 'base':14,49 'basic':22 'bit':7 'blog':4 'els':59 'encrypt':15,47 'entir':17 'envis':33 'everyth':23 'except':26 'explain':10 'hard':40 'home':30,44 'key':72 'os':81 'passphras':63 'passphrase/key/whatever':53 'poetter':3 'possibl':36 'post':5,87 'read':2,85 'realli':39 'resourc':21 'sd':43 'sd-home':42 'specif':66 'still':32 'stuff':67,75 'system':20,74,80 'tie':69,77 'tpm2':13 'unlock':56 'user':52,62,65,71 'wanna':84"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5942834"
  +editedAt: DateTimeImmutable @1707795007 {#4725
    date: 2024-02-13 04:30:07.0 +01:00
  }
  +createdAt: DateTimeImmutable @1703547405 {#4723
    date: 2023-12-26 00:36:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
100 DENIED moderate 
App\Entity\EntryComment {#4729
  +user: Proxies\__CG__\App\Entity\User {#4730 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4500
    +user: App\Entity\User {#4513 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: """
      The problem with this is that the key would be “machine based” and not “person”\n
      \n
      So it’s better for “service accounts”
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1707794904 {#4495
      date: 2024-02-13 04:28:24.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4501 …}
    +nested: Doctrine\ORM\PersistentCollection {#4503 …}
    +votes: Doctrine\ORM\PersistentCollection {#4505 …}
    +reports: Doctrine\ORM\PersistentCollection {#4507 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4509 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4511 …}
    -id: 251926
    -bodyTs: "'account':22 'base':12 'better':19 'key':8 'machin':11 'person':15 'problem':2 'servic':21 'would':9"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemmy.world/comment/6240305"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703539326 {#4496
      date: 2023-12-25 22:22:06.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4500}
  +body: """
    Having read poetterings blog posts a bit and he explains that the TPM2 based encryption is entirely just for system resources (basically everything under `/` with exception of `/home`). For home he still “envisions” (its already possible and not really hard with sd-homed) that the encryption is based on the users passphrase/key/whatever and not unlockable by anyone else than the users passphrase/…\n
    \n
    So user specific stuff is tied to user keys while system stuff is tied to the system & OS.  \n
    If you wanna read the post: [0pointer.net/…/fitting-everything-together.html](https://0pointer.net/blog/fitting-everything-together.html)
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1703547405 {#4722
    date: 2023-12-26 00:36:45.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@ArbiterXero@lemmy.world"
    "@j4k3@lemmy.world"
    "@ArbiterXero@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4731 …}
  +nested: Doctrine\ORM\PersistentCollection {#4733 …}
  +votes: Doctrine\ORM\PersistentCollection {#4736 …}
  +reports: Doctrine\ORM\PersistentCollection {#4738 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4740 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4742 …}
  -id: 252251
  -bodyTs: "'/blog/fitting-everything-together.html)':92 '/fitting-everything-together.html':89 '/home':28 '0pointer.net':88,91 '0pointer.net/blog/fitting-everything-together.html)':90 'alreadi':35 'anyon':58 'base':14,49 'basic':22 'bit':7 'blog':4 'els':59 'encrypt':15,47 'entir':17 'envis':33 'everyth':23 'except':26 'explain':10 'hard':40 'home':30,44 'key':72 'os':81 'passphras':63 'passphrase/key/whatever':53 'poetter':3 'possibl':36 'post':5,87 'read':2,85 'realli':39 'resourc':21 'sd':43 'sd-home':42 'specif':66 'still':32 'stuff':67,75 'system':20,74,80 'tie':69,77 'tpm2':13 'unlock':56 'user':52,62,65,71 'wanna':84"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5942834"
  +editedAt: DateTimeImmutable @1707795007 {#4725
    date: 2024-02-13 04:30:07.0 +01:00
  }
  +createdAt: DateTimeImmutable @1703547405 {#4723
    date: 2023-12-26 00:36:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
101 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
102 DENIED moderate 
App\Entity\EntryComment {#4573
  +user: App\Entity\User {#4586 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Outside of Microsoft and Windows, what’s the application for it? Does Linux or UNIX have much use for TPM? Pardon, my ignorance, but I bet this is a good place to ask!"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1710416669 {#4568
    date: 2024-03-14 12:44:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4574 …}
  +nested: Doctrine\ORM\PersistentCollection {#4576 …}
  +votes: Doctrine\ORM\PersistentCollection {#4578 …}
  +reports: Doctrine\ORM\PersistentCollection {#4580 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4582 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4584 …}
  -id: 270347
  -bodyTs: "'applic':9 'ask':33 'bet':26 'good':30 'ignor':23 'linux':13 'microsoft':3 'much':17 'outsid':1 'pardon':21 'place':31 'tpm':20 'unix':15 'use':18 'window':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7586844"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703537865 {#4569
    date: 2023-12-25 21:57:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
103 DENIED edit 
App\Entity\EntryComment {#4573
  +user: App\Entity\User {#4586 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Outside of Microsoft and Windows, what’s the application for it? Does Linux or UNIX have much use for TPM? Pardon, my ignorance, but I bet this is a good place to ask!"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1710416669 {#4568
    date: 2024-03-14 12:44:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4574 …}
  +nested: Doctrine\ORM\PersistentCollection {#4576 …}
  +votes: Doctrine\ORM\PersistentCollection {#4578 …}
  +reports: Doctrine\ORM\PersistentCollection {#4580 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4582 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4584 …}
  -id: 270347
  -bodyTs: "'applic':9 'ask':33 'bet':26 'good':30 'ignor':23 'linux':13 'microsoft':3 'much':17 'outsid':1 'pardon':21 'place':31 'tpm':20 'unix':15 'use':18 'window':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7586844"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703537865 {#4569
    date: 2023-12-25 21:57:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
104 DENIED moderate 
App\Entity\EntryComment {#4573
  +user: App\Entity\User {#4586 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Outside of Microsoft and Windows, what’s the application for it? Does Linux or UNIX have much use for TPM? Pardon, my ignorance, but I bet this is a good place to ask!"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1710416669 {#4568
    date: 2024-03-14 12:44:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4574 …}
  +nested: Doctrine\ORM\PersistentCollection {#4576 …}
  +votes: Doctrine\ORM\PersistentCollection {#4578 …}
  +reports: Doctrine\ORM\PersistentCollection {#4580 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4582 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4584 …}
  -id: 270347
  -bodyTs: "'applic':9 'ask':33 'bet':26 'good':30 'ignor':23 'linux':13 'microsoft':3 'much':17 'outsid':1 'pardon':21 'place':31 'tpm':20 'unix':15 'use':18 'window':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7586844"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703537865 {#4569
    date: 2023-12-25 21:57:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
105 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
106 DENIED moderate 
App\Entity\EntryComment {#4825
  +user: Proxies\__CG__\App\Entity\User {#4826 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4573
    +user: App\Entity\User {#4586 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Outside of Microsoft and Windows, what’s the application for it? Does Linux or UNIX have much use for TPM? Pardon, my ignorance, but I bet this is a good place to ask!"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1710416669 {#4568
      date: 2024-03-14 12:44:29.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4574 …}
    +nested: Doctrine\ORM\PersistentCollection {#4576 …}
    +votes: Doctrine\ORM\PersistentCollection {#4578 …}
    +reports: Doctrine\ORM\PersistentCollection {#4580 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4582 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4584 …}
    -id: 270347
    -bodyTs: "'applic':9 'ask':33 'bet':26 'good':30 'ignor':23 'linux':13 'microsoft':3 'much':17 'outsid':1 'pardon':21 'place':31 'tpm':20 'unix':15 'use':18 'window':5"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/7586844"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703537865 {#4569
      date: 2023-12-25 21:57:45.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4573}
  +body: "Hardware accelerated disk encryption if I’m not mistaken"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703544783 {#4823
    date: 2023-12-25 23:53:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@gregorum@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4827 …}
  +nested: Doctrine\ORM\PersistentCollection {#4829 …}
  +votes: Doctrine\ORM\PersistentCollection {#4831 …}
  +reports: Doctrine\ORM\PersistentCollection {#4833 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4835 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4837 …}
  -id: 270371
  -bodyTs: "'acceler':2 'disk':3 'encrypt':4 'hardwar':1 'm':7 'mistaken':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7588979"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703544783 {#4824
    date: 2023-12-25 23:53:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
107 DENIED edit 
App\Entity\EntryComment {#4825
  +user: Proxies\__CG__\App\Entity\User {#4826 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4573
    +user: App\Entity\User {#4586 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Outside of Microsoft and Windows, what’s the application for it? Does Linux or UNIX have much use for TPM? Pardon, my ignorance, but I bet this is a good place to ask!"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1710416669 {#4568
      date: 2024-03-14 12:44:29.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4574 …}
    +nested: Doctrine\ORM\PersistentCollection {#4576 …}
    +votes: Doctrine\ORM\PersistentCollection {#4578 …}
    +reports: Doctrine\ORM\PersistentCollection {#4580 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4582 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4584 …}
    -id: 270347
    -bodyTs: "'applic':9 'ask':33 'bet':26 'good':30 'ignor':23 'linux':13 'microsoft':3 'much':17 'outsid':1 'pardon':21 'place':31 'tpm':20 'unix':15 'use':18 'window':5"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/7586844"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703537865 {#4569
      date: 2023-12-25 21:57:45.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4573}
  +body: "Hardware accelerated disk encryption if I’m not mistaken"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703544783 {#4823
    date: 2023-12-25 23:53:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@gregorum@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4827 …}
  +nested: Doctrine\ORM\PersistentCollection {#4829 …}
  +votes: Doctrine\ORM\PersistentCollection {#4831 …}
  +reports: Doctrine\ORM\PersistentCollection {#4833 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4835 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4837 …}
  -id: 270371
  -bodyTs: "'acceler':2 'disk':3 'encrypt':4 'hardwar':1 'm':7 'mistaken':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7588979"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703544783 {#4824
    date: 2023-12-25 23:53:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
108 DENIED moderate 
App\Entity\EntryComment {#4825
  +user: Proxies\__CG__\App\Entity\User {#4826 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4573
    +user: App\Entity\User {#4586 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "Outside of Microsoft and Windows, what’s the application for it? Does Linux or UNIX have much use for TPM? Pardon, my ignorance, but I bet this is a good place to ask!"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1710416669 {#4568
      date: 2024-03-14 12:44:29.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4574 …}
    +nested: Doctrine\ORM\PersistentCollection {#4576 …}
    +votes: Doctrine\ORM\PersistentCollection {#4578 …}
    +reports: Doctrine\ORM\PersistentCollection {#4580 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4582 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4584 …}
    -id: 270347
    -bodyTs: "'applic':9 'ask':33 'bet':26 'good':30 'ignor':23 'linux':13 'microsoft':3 'much':17 'outsid':1 'pardon':21 'place':31 'tpm':20 'unix':15 'use':18 'window':5"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/7586844"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703537865 {#4569
      date: 2023-12-25 21:57:45.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4573}
  +body: "Hardware accelerated disk encryption if I’m not mistaken"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703544783 {#4823
    date: 2023-12-25 23:53:03.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@gregorum@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4827 …}
  +nested: Doctrine\ORM\PersistentCollection {#4829 …}
  +votes: Doctrine\ORM\PersistentCollection {#4831 …}
  +reports: Doctrine\ORM\PersistentCollection {#4833 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4835 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4837 …}
  -id: 270371
  -bodyTs: "'acceler':2 'disk':3 'encrypt':4 'hardwar':1 'm':7 'mistaken':9"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7588979"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703544783 {#4824
    date: 2023-12-25 23:53:03.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
109 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
110 DENIED moderate 
App\Entity\EntryComment {#4646
  +user: App\Entity\User {#4659 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "It scares me. What if the chip dies? How am I gonna be able to get my stuff? I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1710357611 {#4641
    date: 2024-03-13 20:20:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4647 …}
  +nested: Doctrine\ORM\PersistentCollection {#4649 …}
  +votes: Doctrine\ORM\PersistentCollection {#4651 …}
  +reports: Doctrine\ORM\PersistentCollection {#4653 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4655 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4657 …}
  -id: 270343
  -bodyTs: "'abl':14 'chip':7,35 'die':8 'els':39 'encrypt':31 'fulli':22 'get':16 'gonna':12 'save':32 'scare':2 'somewher':38 'stuff':18 'understand':23 'work':26"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7586650"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703537293 {#4642
    date: 2023-12-25 21:48:13.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
111 DENIED edit 
App\Entity\EntryComment {#4646
  +user: App\Entity\User {#4659 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "It scares me. What if the chip dies? How am I gonna be able to get my stuff? I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1710357611 {#4641
    date: 2024-03-13 20:20:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4647 …}
  +nested: Doctrine\ORM\PersistentCollection {#4649 …}
  +votes: Doctrine\ORM\PersistentCollection {#4651 …}
  +reports: Doctrine\ORM\PersistentCollection {#4653 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4655 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4657 …}
  -id: 270343
  -bodyTs: "'abl':14 'chip':7,35 'die':8 'els':39 'encrypt':31 'fulli':22 'get':16 'gonna':12 'save':32 'scare':2 'somewher':38 'stuff':18 'understand':23 'work':26"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7586650"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703537293 {#4642
    date: 2023-12-25 21:48:13.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
112 DENIED moderate 
App\Entity\EntryComment {#4646
  +user: App\Entity\User {#4659 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "It scares me. What if the chip dies? How am I gonna be able to get my stuff? I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1710357611 {#4641
    date: 2024-03-13 20:20:11.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4647 …}
  +nested: Doctrine\ORM\PersistentCollection {#4649 …}
  +votes: Doctrine\ORM\PersistentCollection {#4651 …}
  +reports: Doctrine\ORM\PersistentCollection {#4653 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4655 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4657 …}
  -id: 270343
  -bodyTs: "'abl':14 'chip':7,35 'die':8 'els':39 'encrypt':31 'fulli':22 'get':16 'gonna':12 'save':32 'scare':2 'somewher':38 'stuff':18 'understand':23 'work':26"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7586650"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703537293 {#4642
    date: 2023-12-25 21:48:13.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
113 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
114 DENIED moderate 
App\Entity\EntryComment {#4809
  +user: Proxies\__CG__\App\Entity\User {#4810 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4646
    +user: App\Entity\User {#4659 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "It scares me. What if the chip dies? How am I gonna be able to get my stuff? I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1710357611 {#4641
      date: 2024-03-13 20:20:11.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4647 …}
    +nested: Doctrine\ORM\PersistentCollection {#4649 …}
    +votes: Doctrine\ORM\PersistentCollection {#4651 …}
    +reports: Doctrine\ORM\PersistentCollection {#4653 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4655 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4657 …}
    -id: 270343
    -bodyTs: "'abl':14 'chip':7,35 'die':8 'els':39 'encrypt':31 'fulli':22 'get':16 'gonna':12 'save':32 'scare':2 'somewher':38 'stuff':18 'understand':23 'work':26"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/7586650"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703537293 {#4642
      date: 2023-12-25 21:48:13.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4646}
  +body: """
    > What if the chip dies? How am I gonna be able to get my stuff?\n
    \n
    You can have backup keys, but if you don’t have that then your data is gone.\n
    \n
    > I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?\n
    \n
    Encryption key is stored in the TPM chip.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703538350 {#4807
    date: 2023-12-25 22:05:50.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@penquin@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4811 …}
  +nested: Doctrine\ORM\PersistentCollection {#4813 …}
  +votes: Doctrine\ORM\PersistentCollection {#4815 …}
  +reports: Doctrine\ORM\PersistentCollection {#4817 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4819 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4821 …}
  -id: 270349
  -bodyTs: "'abl':11 'backup':19 'chip':4,49,61 'data':30 'die':5 'els':53 'encrypt':45,54 'fulli':36 'get':13 'gone':32 'gonna':9 'key':20,55 'save':46 'somewher':52 'store':57 'stuff':15 'tpm':60 'understand':37 'work':40"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7586998"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703538350 {#4808
    date: 2023-12-25 22:05:50.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
115 DENIED edit 
App\Entity\EntryComment {#4809
  +user: Proxies\__CG__\App\Entity\User {#4810 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4646
    +user: App\Entity\User {#4659 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "It scares me. What if the chip dies? How am I gonna be able to get my stuff? I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1710357611 {#4641
      date: 2024-03-13 20:20:11.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4647 …}
    +nested: Doctrine\ORM\PersistentCollection {#4649 …}
    +votes: Doctrine\ORM\PersistentCollection {#4651 …}
    +reports: Doctrine\ORM\PersistentCollection {#4653 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4655 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4657 …}
    -id: 270343
    -bodyTs: "'abl':14 'chip':7,35 'die':8 'els':39 'encrypt':31 'fulli':22 'get':16 'gonna':12 'save':32 'scare':2 'somewher':38 'stuff':18 'understand':23 'work':26"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/7586650"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703537293 {#4642
      date: 2023-12-25 21:48:13.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4646}
  +body: """
    > What if the chip dies? How am I gonna be able to get my stuff?\n
    \n
    You can have backup keys, but if you don’t have that then your data is gone.\n
    \n
    > I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?\n
    \n
    Encryption key is stored in the TPM chip.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703538350 {#4807
    date: 2023-12-25 22:05:50.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@penquin@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4811 …}
  +nested: Doctrine\ORM\PersistentCollection {#4813 …}
  +votes: Doctrine\ORM\PersistentCollection {#4815 …}
  +reports: Doctrine\ORM\PersistentCollection {#4817 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4819 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4821 …}
  -id: 270349
  -bodyTs: "'abl':11 'backup':19 'chip':4,49,61 'data':30 'die':5 'els':53 'encrypt':45,54 'fulli':36 'get':13 'gone':32 'gonna':9 'key':20,55 'save':46 'somewher':52 'store':57 'stuff':15 'tpm':60 'understand':37 'work':40"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7586998"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703538350 {#4808
    date: 2023-12-25 22:05:50.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
116 DENIED moderate 
App\Entity\EntryComment {#4809
  +user: Proxies\__CG__\App\Entity\User {#4810 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4646
    +user: App\Entity\User {#4659 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: null
    +root: null
    +body: "It scares me. What if the chip dies? How am I gonna be able to get my stuff? I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?"
    +lang: "en"
    +isAdult: false
    +favouriteCount: 1
    +score: 0
    +lastActive: DateTime @1710357611 {#4641
      date: 2024-03-13 20:20:11.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4647 …}
    +nested: Doctrine\ORM\PersistentCollection {#4649 …}
    +votes: Doctrine\ORM\PersistentCollection {#4651 …}
    +reports: Doctrine\ORM\PersistentCollection {#4653 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4655 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4657 …}
    -id: 270343
    -bodyTs: "'abl':14 'chip':7,35 'die':8 'els':39 'encrypt':31 'fulli':22 'get':16 'gonna':12 'save':32 'scare':2 'somewher':38 'stuff':18 'understand':23 'work':26"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/7586650"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703537293 {#4642
      date: 2023-12-25 21:48:13.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4646}
  +body: """
    > What if the chip dies? How am I gonna be able to get my stuff?\n
    \n
    You can have backup keys, but if you don’t have that then your data is gone.\n
    \n
    > I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?\n
    \n
    Encryption key is stored in the TPM chip.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703538350 {#4807
    date: 2023-12-25 22:05:50.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@penquin@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4811 …}
  +nested: Doctrine\ORM\PersistentCollection {#4813 …}
  +votes: Doctrine\ORM\PersistentCollection {#4815 …}
  +reports: Doctrine\ORM\PersistentCollection {#4817 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4819 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4821 …}
  -id: 270349
  -bodyTs: "'abl':11 'backup':19 'chip':4,49,61 'data':30 'die':5 'els':53 'encrypt':45,54 'fulli':36 'get':13 'gone':32 'gonna':9 'key':20,55 'save':46 'somewher':52 'store':57 'stuff':15 'tpm':60 'understand':37 'work':40"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7586998"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703538350 {#4808
    date: 2023-12-25 22:05:50.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
117 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
118 DENIED moderate 
App\Entity\EntryComment {#4878
  +user: App\Entity\User {#4659 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4809
    +user: Proxies\__CG__\App\Entity\User {#4810 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4646
      +user: App\Entity\User {#4659 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "It scares me. What if the chip dies? How am I gonna be able to get my stuff? I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1710357611 {#4641
        date: 2024-03-13 20:20:11.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4647 …}
      +nested: Doctrine\ORM\PersistentCollection {#4649 …}
      +votes: Doctrine\ORM\PersistentCollection {#4651 …}
      +reports: Doctrine\ORM\PersistentCollection {#4653 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4655 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4657 …}
      -id: 270343
      -bodyTs: "'abl':14 'chip':7,35 'die':8 'els':39 'encrypt':31 'fulli':22 'get':16 'gonna':12 'save':32 'scare':2 'somewher':38 'stuff':18 'understand':23 'work':26"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/7586650"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703537293 {#4642
        date: 2023-12-25 21:48:13.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4646}
    +body: """
      > What if the chip dies? How am I gonna be able to get my stuff?\n
      \n
      You can have backup keys, but if you don’t have that then your data is gone.\n
      \n
      > I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?\n
      \n
      Encryption key is stored in the TPM chip.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1703538350 {#4807
      date: 2023-12-25 22:05:50.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@penquin@lemm.ee"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4811 …}
    +nested: Doctrine\ORM\PersistentCollection {#4813 …}
    +votes: Doctrine\ORM\PersistentCollection {#4815 …}
    +reports: Doctrine\ORM\PersistentCollection {#4817 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4819 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4821 …}
    -id: 270349
    -bodyTs: "'abl':11 'backup':19 'chip':4,49,61 'data':30 'die':5 'els':53 'encrypt':45,54 'fulli':36 'get':13 'gone':32 'gonna':9 'key':20,55 'save':46 'somewher':52 'store':57 'stuff':15 'tpm':60 'understand':37 'work':40"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/7586998"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703538350 {#4808
      date: 2023-12-25 22:05:50.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4646}
  +body: "Ok this is scary. Lol Unless you have those backup keys then it’s a bit better."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703538421 {#4876
    date: 2023-12-25 22:07:01.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@penquin@lemm.ee"
    "@ipha@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4879 …}
  +nested: Doctrine\ORM\PersistentCollection {#4881 …}
  +votes: Doctrine\ORM\PersistentCollection {#4883 …}
  +reports: Doctrine\ORM\PersistentCollection {#4885 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4887 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4889 …}
  -id: 270350
  -bodyTs: "'backup':10 'better':17 'bit':16 'key':11 'lol':5 'ok':1 'scari':4 'unless':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7587018"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703538421 {#4877
    date: 2023-12-25 22:07:01.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
119 DENIED edit 
App\Entity\EntryComment {#4878
  +user: App\Entity\User {#4659 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4809
    +user: Proxies\__CG__\App\Entity\User {#4810 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4646
      +user: App\Entity\User {#4659 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "It scares me. What if the chip dies? How am I gonna be able to get my stuff? I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1710357611 {#4641
        date: 2024-03-13 20:20:11.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4647 …}
      +nested: Doctrine\ORM\PersistentCollection {#4649 …}
      +votes: Doctrine\ORM\PersistentCollection {#4651 …}
      +reports: Doctrine\ORM\PersistentCollection {#4653 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4655 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4657 …}
      -id: 270343
      -bodyTs: "'abl':14 'chip':7,35 'die':8 'els':39 'encrypt':31 'fulli':22 'get':16 'gonna':12 'save':32 'scare':2 'somewher':38 'stuff':18 'understand':23 'work':26"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/7586650"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703537293 {#4642
        date: 2023-12-25 21:48:13.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4646}
    +body: """
      > What if the chip dies? How am I gonna be able to get my stuff?\n
      \n
      You can have backup keys, but if you don’t have that then your data is gone.\n
      \n
      > I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?\n
      \n
      Encryption key is stored in the TPM chip.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1703538350 {#4807
      date: 2023-12-25 22:05:50.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@penquin@lemm.ee"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4811 …}
    +nested: Doctrine\ORM\PersistentCollection {#4813 …}
    +votes: Doctrine\ORM\PersistentCollection {#4815 …}
    +reports: Doctrine\ORM\PersistentCollection {#4817 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4819 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4821 …}
    -id: 270349
    -bodyTs: "'abl':11 'backup':19 'chip':4,49,61 'data':30 'die':5 'els':53 'encrypt':45,54 'fulli':36 'get':13 'gone':32 'gonna':9 'key':20,55 'save':46 'somewher':52 'store':57 'stuff':15 'tpm':60 'understand':37 'work':40"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/7586998"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703538350 {#4808
      date: 2023-12-25 22:05:50.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4646}
  +body: "Ok this is scary. Lol Unless you have those backup keys then it’s a bit better."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703538421 {#4876
    date: 2023-12-25 22:07:01.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@penquin@lemm.ee"
    "@ipha@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4879 …}
  +nested: Doctrine\ORM\PersistentCollection {#4881 …}
  +votes: Doctrine\ORM\PersistentCollection {#4883 …}
  +reports: Doctrine\ORM\PersistentCollection {#4885 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4887 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4889 …}
  -id: 270350
  -bodyTs: "'backup':10 'better':17 'bit':16 'key':11 'lol':5 'ok':1 'scari':4 'unless':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7587018"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703538421 {#4877
    date: 2023-12-25 22:07:01.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
120 DENIED moderate 
App\Entity\EntryComment {#4878
  +user: App\Entity\User {#4659 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Is-anyone-here-using-their-hardware-TPM-chips-for-credentials"
    +title: "Is anyone here using their hardware TPM chips for credentials?"
    +url: null
    +body: "I’m curious about the possible uses of the hardware Trusted Protection Module for automatic login or transfer encryption. I’m not really looking to solve anything or pry. I’m just curious about the use cases as I’m exploring network attached storage and to a lesser extent self hosting. I see a lot of places where public private keys are generated and wonder why I don’t see people mention generating the public key from TPM where the private key is never accessible at all."
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 29
    +favouriteCount: 95
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1710554448 {#2418
      date: 2024-03-16 03:00:48.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 24814
    -titleTs: "'anyon':2 'chip':8 'credenti':10 'hardwar':6 'tpm':7 'use':4"
    -bodyTs: "'access':85 'anyth':27 'attach':43 'automat':15 'case':37 'curious':3,33 'encrypt':19 'explor':41 'extent':49 'generat':63,73 'hardwar':10 'host':51 'key':61,76,82 'lesser':48 'login':16 'look':24 'lot':55 'm':2,21,31,40 'mention':72 'modul':13 'network':42 'never':84 'peopl':71 'place':57 'possibl':6 'pri':29 'privat':60,81 'protect':12 'public':59,75 'realli':23 'see':53,70 'self':50 'solv':26 'storag':44 'tpm':78 'transfer':18 'trust':11 'use':7,36 'wonder':65"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1703620970
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/9969516"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703534570 {#1858
      date: 2023-12-25 21:02:50.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: App\Entity\EntryComment {#4809
    +user: Proxies\__CG__\App\Entity\User {#4810 …}
    +entry: App\Entity\Entry {#2412}
    +magazine: App\Entity\Magazine {#264}
    +image: null
    +parent: App\Entity\EntryComment {#4646
      +user: App\Entity\User {#4659 …}
      +entry: App\Entity\Entry {#2412}
      +magazine: App\Entity\Magazine {#264}
      +image: null
      +parent: null
      +root: null
      +body: "It scares me. What if the chip dies? How am I gonna be able to get my stuff? I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?"
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1710357611 {#4641
        date: 2024-03-13 20:20:11.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@j4k3@lemmy.world"
      ]
      +children: Doctrine\ORM\PersistentCollection {#4647 …}
      +nested: Doctrine\ORM\PersistentCollection {#4649 …}
      +votes: Doctrine\ORM\PersistentCollection {#4651 …}
      +reports: Doctrine\ORM\PersistentCollection {#4653 …}
      +favourites: Doctrine\ORM\PersistentCollection {#4655 …}
      +notifications: Doctrine\ORM\PersistentCollection {#4657 …}
      -id: 270343
      -bodyTs: "'abl':14 'chip':7,35 'die':8 'els':39 'encrypt':31 'fulli':22 'get':16 'gonna':12 'save':32 'scare':2 'somewher':38 'stuff':18 'understand':23 'work':26"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://lemm.ee/comment/7586650"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703537293 {#4642
        date: 2023-12-25 21:48:13.0 +01:00
      }
    }
    +root: App\Entity\EntryComment {#4646}
    +body: """
      > What if the chip dies? How am I gonna be able to get my stuff?\n
      \n
      You can have backup keys, but if you don’t have that then your data is gone.\n
      \n
      > I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?\n
      \n
      Encryption key is stored in the TPM chip.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 0
    +score: 0
    +lastActive: DateTime @1703538350 {#4807
      date: 2023-12-25 22:05:50.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@j4k3@lemmy.world"
      "@penquin@lemm.ee"
    ]
    +children: Doctrine\ORM\PersistentCollection {#4811 …}
    +nested: Doctrine\ORM\PersistentCollection {#4813 …}
    +votes: Doctrine\ORM\PersistentCollection {#4815 …}
    +reports: Doctrine\ORM\PersistentCollection {#4817 …}
    +favourites: Doctrine\ORM\PersistentCollection {#4819 …}
    +notifications: Doctrine\ORM\PersistentCollection {#4821 …}
    -id: 270349
    -bodyTs: "'abl':11 'backup':19 'chip':4,49,61 'data':30 'die':5 'els':53 'encrypt':45,54 'fulli':36 'get':13 'gone':32 'gonna':9 'key':20,55 'save':46 'somewher':52 'store':57 'stuff':15 'tpm':60 'understand':37 'work':40"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://lemm.ee/comment/7586998"
    +editedAt: null
    +createdAt: DateTimeImmutable @1703538350 {#4808
      date: 2023-12-25 22:05:50.0 +01:00
    }
  }
  +root: App\Entity\EntryComment {#4646}
  +body: "Ok this is scary. Lol Unless you have those backup keys then it’s a bit better."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1703538421 {#4876
    date: 2023-12-25 22:07:01.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@j4k3@lemmy.world"
    "@penquin@lemm.ee"
    "@ipha@lemm.ee"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4879 …}
  +nested: Doctrine\ORM\PersistentCollection {#4881 …}
  +votes: Doctrine\ORM\PersistentCollection {#4883 …}
  +reports: Doctrine\ORM\PersistentCollection {#4885 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4887 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4889 …}
  -id: 270350
  -bodyTs: "'backup':10 'better':17 'bit':16 'key':11 'lol':5 'ok':1 'scari':4 'unless':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/7587018"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703538421 {#4877
    date: 2023-12-25 22:07:01.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
121 DENIED edit 
App\Entity\Magazine {#264
  +icon: Proxies\__CG__\App\Entity\Image {#245 …}
  +name: "linux@lemmy.ml"
  +title: "linux"
  +description: """
    From Wikipedia, the free encyclopedia\n
    \n
    Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
    \n
    Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
    \n
    ### Rules\n
    \n
    - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
    - No misinformation\n
    - No NSFW content\n
    - No hate speech, bigotry, etc\n
    \n
    ### Related Communities\n
    \n
    - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
    - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
    - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
    - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
    \n
    Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 1406
  +entryCommentCount: 28632
  +postCount: 6
  +postCommentCount: 214
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729583542 {#274
    date: 2024-10-22 09:52:22.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#236 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
  +entries: Doctrine\ORM\PersistentCollection {#179 …}
  +posts: Doctrine\ORM\PersistentCollection {#137 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
  +bans: Doctrine\ORM\PersistentCollection {#116 …}
  +reports: Doctrine\ORM\PersistentCollection {#102 …}
  +badges: Doctrine\ORM\PersistentCollection {#80 …}
  +logs: Doctrine\ORM\PersistentCollection {#70 …}
  +awards: Doctrine\ORM\PersistentCollection {#1360 …}
  +categories: Doctrine\ORM\PersistentCollection {#1792 …}
  -id: 73
  +apId: "linux@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/linux"
  +apPublicUrl: "https://lemmy.ml/c/linux"
  +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "linux"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1729583596 {#268
    date: 2024-10-22 09:53:16.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1698929468 {#270
    date: 2023-11-02 13:51:08.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details