3 ms·
The browser doesn't interface directly with any of the hardware, the operating system does. And the integrity of the operating system can be attested to by the
by jsnell 3y ago
The browser doesn't interface directly with any of the hardware, the operating system does. And the integrity of the operating system can be attested to by the hardware via a chain of trust all the way to the secure bootloader.
- sam0x17 3y agoYeah but what's to stop me from spawning a hidden instance of edge, sending keys etc to it to get it to visit some page, and using either window sub-classing (to hack it's memory space and read the request directly) or a local proxy server to steal the attestation it generates before terminating the request? Likewise what's to stop you from patching the operating system directly (ok secure boot) You could also just emulate an entire windows OS + TPM and have the emulator do it it sounds like Like any scenario where I'm allowed to run arbitrary code within the OS with administrator privileges sounds like you could escape this.
- alex7734 3y ago> You could also just emulate an entire windows OS + TPM and have the emulator do it it sounds like Yes, but your emulated TPM is not on the approved list. To impersonate an approved TPM you would need to pull the keys from a real TPM which requires (probably very expensive) semiconductor lab tools and trashing the chip.
- sam0x17 3y agoSuch an evil pattern. We need to eliminate this at all costs. Luckily I think if Chrome were to move forward with this they'd face extreme anti-trust stuff as a result
- hellojesus 3y agoIf you did trash the chip whilr managing to successfully pull the tpm keys, could you then use that key to sign requests in an unapproved vm or on metal with a different root tpm?