News for hackers. Stuff that matters.

A comment on TCG TPM2.0 implementations vulnerable to memory corruption. Parent comment

Re:TCG TPM2.0 implementations vulnerable to memory corruption by Cyph0n on Tuesday February 28, 2023 @05:15PM (#34975682)
I’m a total security noob, but I’d wager that privilege escalation is a piece of cake relative to key extraction from a TPM.
[ Parent | on HN ]
Re:TCG TPM2.0 implementations vulnerable to memory corruption by AstralStorm on Thursday March 02, 2023 @05:41AM (#34994240)
Not on fully secured Windows with Device Guard, Credential Guard, HVCI and mitigations on it is not.

The defaults are lax garbage though.

[ Parent | on HN ]