DPAPI security flaw in Windows 10

Re:DPAPI security flaw in Windows 10 by sterlind on Tuesday June 18, 2019 @04:38AM (#20210721)

If I'm understanding correctly, did the RDMA attack work because it was able to probe arbitrary memory-mapped registers on request?

And for the TPM attack, is the FPGA able to initiate it? or would this have to be some kind of hardware implant? the latter isn't a big deal - plenty of ways to bug a machine given invasive physical access - the former would be a serious TPM breach akin to GrayKey.

also I'm a little clueless, but my secure laptop has a Bitlocker boot password, with autologin disabled even during updates iirc. does that not mitigate?

[ Parent | on HN ]

Re:DPAPI security flaw in Windows 10 by semi-extrinsic on Tuesday June 18, 2019 @04:45AM (#20210743)

I think if you have Bitlocker set up with a boot password, and you are careful to shut down when you're not using the computer, then you're probably fine. But in my experience most people use Bitlocker just with the Windows login prompt.

As I understand it, the FPGA is able to initiate the TPM key extraction, yes. So it's not a sniffer that has to wait for the user to input the password.

https://pulsesecurity.co.nz/articles/TPM-sniffing

[ Parent | on HN ]