News for hackers. Stuff that matters.

A comment on AMD PSP: Firmware TPM Remote Code Execution via Crafted EK Certificate. Parent comment

Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by londons_explore on Friday January 05, 2018 @03:27PM (#16081381)
TPM's are supposed to be resistant to physical attacks.

With this flaw, someone can just stick a bootable USB stick in your computer to mirror the LUKS/bitlocker disk drive and get access to the keys in the TPM which protect that drive.

[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by dfox on Friday January 05, 2018 @03:34PM (#16081433)
For discrete TPMs the specification explicitly says that they are not required to be resistant to physical attacks (probably because that would require specifying what kinds of attacks it is supposed to be resistant to).
[ Parent | on HN ]