TPM GPIO fail: How bad OEM firmware ruins Intel TPM security

Re:TPM GPIO fail: How bad OEM firmware ruins Intel TPM security by fellerts on Thursday June 06, 2024 @04:26AM (#40594941)

I doubt your physical keyboard's connection to the motherboard is encrypted (I'd guess USB, I2C or maybe even PS/2 internally). I would also not be surprised if you can get small in-line sniffers that an attacker, with physical access for half an hour, could hide in your laptop.

All bets are off if your attacker is determined and has physical access.

[ Parent | on HN ]

Re:TPM GPIO fail: How bad OEM firmware ruins Intel TPM security by atoav on Thursday June 06, 2024 @04:31AM (#40594974)

There have been papers about extracting key presses from acceleration sensors of a phone, or from the sounds of key clicking by statistical inference what feels like a decade ago. You probably don't even need to touch the laptop to do that.

[ Parent | on HN ]

Re:TPM GPIO fail: How bad OEM firmware ruins Intel TPM security by izacus on Thursday June 06, 2024 @04:28AM (#40594956)

I mean, I wouldn't be there to type in my password because the laptop was stolen.

[ Parent | on HN ]