upvote
Basically all computers use efuses, otherwise it would be possible to rollback the firmware to a previous, insecure version.

For something like a game console, that’s annoying, for a phone or laptop, that’s highly desirable if something like a TPM bug is fixed, without efuses the system would forever be vulnerable.

reply
E-fuses are just write once memory with limited reads ability 10e6-10e7 read cycles after which it becomes unreliable.

Secure boot that can't be controlled by the user should be illegal, though. You should get some secret code along with a device, that allows you as the buyer to tamper with it. So much hardware out there can just serve as something else, or can be supported by people on a voluntary basis, sans the completely arbitrary lockdown of ability to install your own code to the device.

reply