10
Critical 'LogoFAIL' Bugs Offer Secure Boot Bypass for Millions of PCs
(www.darkreading.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 02 Dec 2023
10 points (91.7% liked)
cybersecurity
3306 readers
177 users here now
An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!
Community Rules
- Be kind
- Limit promotional activities
- Non-cybersecurity posts should be redirected to other communities within infosec.pub.
Enjoy!
founded 1 year ago
MODERATORS
So this nullifies Bitlocker when the key is stored jn the TPM right? The whole reason that works is the TPM verifies that the OS is secure before boot and so the OS can then be trusted with the Bitlocker encryption key. But if the TPM believes the OS is secure when it isn’t, you can modify the OS to just dump the encryption key on boot. Am I missing something here?