News for hackers. Stuff that matters.

A comment on Apple enabling client-side CSAM scanning on iPhone tomorrow. Parent comment

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by warkdarrior on Thursday August 05, 2021 @01:36PM (#28076956)
> 2. TPMs basically has zero access to the rest of the system. It's connected via a LPC bus, so there's no fancy DMA attacks to pull off. Over that bus the system firmware sends various hashes of the system state (eg. hash of your bootloader), but that's about it.

That's the specification. Have you actually monitored the bus using probes? Did you check that the TPM is only connected to LPC?

[ Parent | on HN ]
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by gruez on Thursday August 05, 2021 @02:03PM (#28077300)
>Have you actually monitored the bus using probes

Isn't this the definition of FUD?

>Did you check that the TPM is only connected to LPC?

Dunno, you tell me. https://en.wikipedia.org/wiki/File:TPM_Asus.jpg

[ Parent | on HN ]