4 ms·

they might mean "after you enter the bitlocker PIN you get root access without having a login password on the system" - still just a privilege escalation bug

• iscoelho 5mo ago
  That’s quite a stretch, to say the least.
  • aiscoming 5mo ago
    claiming to have a 10 times more impressive PoC but not releasing it "out of goodness of heart" is also quite a stretch
    • iscoelho 5mo ago
      Considering the researcher had already reported these to Microsoft, and delayed releasing them publicly until Microsoft "pulled every childish game possible" (quote) instead of patching them, it's not unreasonable for the researcher to be withholding another exploit from the public to limit harm. I also disagree that the PIN bypass would be "10 times more impressive," but that's just my professional opinion.
      • ranger_danger 5mo ago
        We know that the PIN method wraps the key in additional layers of encryption, and that the TPM happily returns this wrapped key on boot. So the extra step(s) required would be to bruteforce the PIN and now you can unwrap the plain key. https://post-cyberlabs.github.io/Offensive-security-publications/posts/2024_09_tpmandpin/ https://post-cyberlabs.github.io/Offensive-security-publicat...
    • sexylinux 5mo ago
      If you think about it for some minutes you will maybe understand that there are many reasons not to publish it.