2 ms·
This is very important. For some reason in these threads nobody seems to bring up or realize that modern AMD CPU's fTPM is completely broken and not fixable vi
by chlorion 3y ago
This is very important.
For some reason in these threads nobody seems to bring up or realize that modern AMD CPU's fTPM is completely broken and not fixable via ucode updates. The AMD TPM exploit is exploitable by a "regular" person too, it doesn't have to be a state level actor, just some techy person with a few tools and physical access to the system.
We can't audit these things at all and I don't think we should just trust that they are safe, and we know for a fact that many of them aren't safe, even against "regular" threats.
(AMD fTPM exploit source) https://arxiv.org/abs/2304.14717 https://arxiv.org/abs/2304.14717