3 ms·
I don't get it. If the laptop can already boot up with the tpm and the attacker has the entire laptop, what exactly is broken here? Isn't the TPM mainly there t
by snowstormsun 3y ago
I don't get it. If the laptop can already boot up with the tpm and the attacker has the entire laptop, what exactly is broken here? Isn't the TPM mainly there to protect against decrypting the SSD when it's separated from the Mainboard. If windows boots up automatically the encryption key probably could be extracted from the memory somehow too, right?
- arghwhat 3y agoThe OS might have protections in place - modern CPUs support encrypted memory - or even just something as annoying as a login prompt it won't let you past. Any attack to find keys in memory - unless you find a simple exploit for the login prompt - will be more complex than just booting the machine with that sniffer plugged in.