TPM-Attest proposes a hardware-rooted alternative to invasive kernel-level anti-cheat systems for Linux gaming, using TPM 2.0 and the Integrity Measurement Architecture to cryptographically verify clean boots and authorized software without proprietary drivers. The system intercepts Epic Online Services calls via userspace hooks and achieves 100% detection across 500 tamper tests, with the implementation released as open-source.
Device Bound Session Credentials (DBSC) is an experimental web standard implemented in ASP.NET Core that ties session cookies to a device's private key, preventing cookie replay attacks. When a stolen cookie is copied to another machine, it becomes useless for session refresh since only the original device can sign the cryptographic challenge. This significantly reduces the attack window from weeks to minutes by forcing short-lived cookies that require device-based proof to refresh.