Hardware TPM Hacked 327
Posted
by
Soulskill
from the matter-of-time dept.
from the matter-of-time dept.
BiggerIsBetter writes "Christopher Tarnovsky has pulled off the 'near impossible' TPM hardware hack. We all knew it was only a matter of time; this is why you shouldn't entrust your data to proprietary solutions. From the article: 'The technique can also be used to tap text messages and email belonging to the user of a lost or stolen phone. Tarnovsky said he can't be sure, however, whether his attack would work on TPM chips made by companies other than Infineon. Infineon said it knew this type of attack was possible when it was testing its chips. But the company said independent tests determined that the hack would require such a high skill level that there was a limited chance of it affecting many users. ... The Trusted Computing Group, which sets standards on TPM chips, called the attack "exceedingly difficult to replicate in a real-world environment."'"
Re:Am I getting old? (Score:3, Funny)
Yes, it means you're getting old. On the plus side, your memory appears to be in great shape.
Re:surprise surprise (Score:5, Funny)
How about you do something crazy and carry on to the actual article (I know.. I forgot where I was)
You tell me how you're going to pack acid and rust remover into a downloadable tool and I'll worry.
Solution is quite obvious (Score:4, Funny)
Since using technique involves reverse engineering the chip, this is a clear violation of the DMCA. So just find your local attorney and prosecute.
Problem solved. Nothing to see here move along. Thanks for playing. :)
When I see "TPM hacked" only one thing comes to me (Score:3, Funny)
Re:Yeah, this is going to be a major problem... (Score:2, Funny)
LSD doesn't work that way, otherwise the CIA would still be using it.
Knowing that the password tastes like fuchsia does not help.
Re:Step 1 - decap the chip without killing it (Score:3, Funny)
Not the kind of thing you're going to do in your kitchen!
What!? You obviously have never seen my kitchen. ;)