Yawn. IBM/AIX's WPARs & LPARs, Sun/Solaris' dynamic system domains & zones, BSD jails. How many times are we going to pat ourselves on the back for reinventing the wheel?
A researcher found that the communication lanes between the CPU and external TPM are completely unencrypted on bootup — enabling an attacker to sniff critical data as it moves between the two units, thus stealing the encryption keys.