News for hackers. Stuff that matters.

A comment on How to programmatically find out if computer is on. Parent comment

Re:How to programmatically find out if computer is on by londons_explore on Sunday November 21, 2021 @05:15AM (#29295281)
Store the LUKS crypto key in the TPM, and make sure secure boot is used so the TPM will only reveal the key if the systems boot chain is verified.
[ Parent | on HN ]
Re:How to programmatically find out if computer is on by mschuster91 on Sunday November 21, 2021 @09:03AM (#29296271)
Nope. That's dangerous, TPM keys can be sniffed on the bus: https://trmm.net/tpm-sniffing/
[ Parent | on HN ]
Re:How to programmatically find out if computer is on by brirec on Sunday November 21, 2021 @08:20PM (#29301631)
Is a LUKS key being sent remotely to Intel ME _not_ vulnerable to being sniffed on the LAN?
[ Parent | on HN ]
Re:How to programmatically find out if computer is on by mschuster91 on Monday November 22, 2021 @03:23AM (#29304090)
You don't need to involve ME into remote decrypting. Embed the LUKS binaries and dropbear into your initramfs, and off you go.
[ Parent | on HN ]