3 ms·
> TPM 2.0 and hardware-assisted virtualization allow them to move the kernel one level up in the privilege hierarchy, while properly verifying it during boot to
by josefx 5y ago
> TPM 2.0 and hardware-assisted virtualization allow them to move the kernel one level up in the privilege hierarchy, while properly verifying it during boot to eliminate entire categories of exploits and providing trusted computing that might actually work this time.
So Microsoft is going all in with hardware based security while everyone is still recovering from Spectre and Meltdown and dropping in additional layers of software fix CPU security flaws? Is there a betting pool somewhere on how long that will take to backfire?
- crocodiletears 5y agoIt won't for them, because they've shifted culpability over to the hardware vendors.
- ssklash 5y agoA big part of it is not just hardware based security, it's virtualization based security (VBS). Essentially adding a hypervisor layer under Windows that manages access to sensitive processes like lsass, which handles credential material. This is a huge improvement in the Windows security model, and even if there are bypasses, they are non-trivial and consist of more than just elevating to admin/SYSTEM as is the current case.