Re:TPM GPIO fail: How bad OEM firmware ruins Intel TPM security
by dist-epoch on Thursday June 06, 2024 @10:40AM
(#40597972)
A solution would be to have two passwords, and display a secret security image between them.
User is required to not enter the second password if the wrong security image is displayed.
You can still attack it with a fancy radio transmitter which transmits the security image from the stolen laptop when it's displayed after you've entered the first password to the second laptop.
User is required to not enter the second password if the wrong security image is displayed.
You can still attack it with a fancy radio transmitter which transmits the security image from the stolen laptop when it's displayed after you've entered the first password to the second laptop.