2 ms·
Full writeup is a much better read: https://blackwinghq.com/blog/posts/a-touch-of-pwn-part-i/ https://blackwinghq.com/blog/posts/a-touch-of-pwn-part-i/ "Micros
by petee 3y ago
Full writeup is a much better read: https://blackwinghq.com/blog/posts/a-touch-of-pwn-part-i/ https://blackwinghq.com/blog/posts/a-touch-of-pwn-part-i/
"Microsoft did a good job designing SDCP to provide a secure channel between the host and biometric devices, but unfortunately device manufacturers seem to misunderstand some of the objectives. Additionally, SDCP only covers a very narrow scope of a typical device’s operation, while most devices have a sizable attack surface exposed that is not covered by SDCP at all.
Finally, we found that SDCP wasn’t even enabled on two out of three of the devices we targeted." Oof.
- dang 3y agoOk, we'll move the comments to https://news.ycombinator.com/item?id=38379168 https://news.ycombinator.com/item?id=38379168, which has that article, and re-up it. Thanks! Submitters: "Please submit the original source. If a post reports on something found on another site, submit the latter." - https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html Edit: I've leaving the comments which were mostly reacting just to the title here.