Live data from Hacker News

faulTPM: Exposing AMD fTPMs' Deepest Secrets

arxiv.org

91–100 of 273 posts

Re: faulTPM: Exposing AMD fTPMs' Deepest Secrets

#91
post #80

Earlier quoted context omitted.

Not only do they hide it under a group policy even when you enable an "Enhanced PIN" there is a maximum length of 20.

Why do they do this, Samsung does the same tiny length limit for Secure Folder. Is it law enforcement requested?

yes

Re: faulTPM: Exposing AMD fTPMs' Deepest Secrets

#92

Earlier quoted context omitted.

I did find it odd that my Ryzen 7 1700X (8 cores, 16 threads, 3.4GHz) was suddenly "not good enough" to run the OS.

It'll work fine, Microsoft even explains how to upgrade: https://support.microsoft.com/en-us/windows/installing-windo... They chose an arbitrary cut-off date for hardware support for their new OS. They decided not to support old stuff anymore and they had to pick a date/technology platform. It was always going to be arbitrary. In my opinion they should've picked a clearer distinction (i.e. require a certain level of…

[dead]

Re: faulTPM: Exposing AMD fTPMs' Deepest Secrets

#93
post #16

Earlier quoted context omitted.

Does this line imply then it is mostly a concern for Windows users? I don't mind only using Linux, it is Best in Slot for most tasks anyways.

if Linux full disk encryption would have a more user friendly UX a lot of Linux users would probably use that too its a very convenient feature through is not convenient to setup and a lot of Linux users never trusted it to be secure, i. e. a lot of people expected an attack like this sooner or later

The current state of userfriendly is quite good. In Ubuntu it's just a checkbox in the installer and input a passphrase.

Re: faulTPM: Exposing AMD fTPMs' Deepest Secrets

#94

Earlier quoted context omitted.

[flagged]

I'm a windows user since 3.1 and don't know much about linux except the few trials and my pihole. What's the impact of having systemd (or not) for the everyday layman like me that just uses Visual Studio Code to build flutter apps ?

Nothing. Systemd is a suite of software that handle a lot of the low-level operations on Linux (In particular, the service manager, some network configuration, along with some other stuff). Historically, those operations were handled by different services (like SysvInit).

A lot of people are mad about it for a lot of reasons, but if you're not a system administrator, it's probably better to stick with systemd, since it's what most of the linux community has standardized on, and thus it's much easier to find information online about using those systems.

Re: faulTPM: Exposing AMD fTPMs' Deepest Secrets

#95

The most important sentences of the article: "Our attack utilizes the AMD-SP’s vulnerability to voltage fault injection attacks [14] to extract a chip-unique secret from the targeted CPU." "The attack requires access to the motherboard of the target system (4.1), particularly its SPI bus and voltage regulators." In other words, it is required to open the laptop and connect custom (but cheap) hardware to the motherboa…

Amateur-me thinks that it would not be too hard to prevent such an attack: Have a voltage fault detection circuit at all (TPM-relevant) supply pins that hard-locks the chip until it gets power cycled, and have those circuits be powered by on-chip capacitors that survive just a little longer than their time-to-trigger. Would that be feasible?

Re: faulTPM: Exposing AMD fTPMs' Deepest Secrets

#96

Earlier quoted context omitted.

Microsoft is edging closer and closer to dropping support for Windows 10(even a computer I built in 2017 that's still running perfectly fine can't upgrade). But for many users, changing to another OS besides Windows is tantamount to not functioning, so planned obsolescence continues apace.

I wish there was a linux distro made by people who love windows, not linux.

Use any Unbutu distribution with MATE or Cinnamon. Like shit dawg, I got my grandma using Linux Mint with MATE.

Changed the background to match the same one on her old laptop and added some desktop icons, and boom 99% of her experience was the same. Had to help her a little with the LibreOffice -- that's a little different -- but otherwise functionally similar to Windows 7 / Win10.

I'm using linux as a daily driver and at this point there isn't anything I can't do on Windows. The hold out for a while was games, but Proton w/ Steam works well and I can play big titles like Cyberpunk 2077.

Re: faulTPM: Exposing AMD fTPMs' Deepest Secrets

#97
post #70

Earlier quoted context omitted.

Debian Stable welcomes refugees: https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/ (Or, for laptops with closed WiFi and no Ethernet, use this installer: https://cdimage.debian.org/cdimage/unofficial/non-free/cd-in... )

[flagged]

You mean the Devuan which for more than a year and a half had a bug which resulted in the empty string being set as root password?[0]

[0]: https://linuxiac.com/devuan-users-are-at-risk/

Re: faulTPM: Exposing AMD fTPMs' Deepest Secrets

#98

Does this affect OPAL 2.0 in any way? I tried to search through the spec [1] but didn't find immediate clues. [1]: https://trustedcomputinggroup.org/wp-content/uploads/TCG_Sto...

Thanks for the pointer, we haven't checked out OPAL yet. It seems to be the most popular standard when it comes to "Self Encrypting Drives" (SED).

Looking into it shortly, I've found a paper from 2019 from Meijer et al. ([1]) finding several flaws with OPAL-compliant drives. They further find that BitLocker entirely depends on SSD-based encryption if the hardware advertises it. This finding's nature is very similar to ours in that BitLocker's Disk Encryption is insecure/unreliable in particular hardware configurations.

[1] https://ieeexplore.ieee.org/document/8835339

Re: faulTPM: Exposing AMD fTPMs' Deepest Secrets

#99
post #95

The most important sentences of the article: "Our attack utilizes the AMD-SP’s vulnerability to voltage fault injection attacks [14] to extract a chip-unique secret from the targeted CPU." "The attack requires access to the motherboard of the target system (4.1), particularly its SPI bus and voltage regulators." In other words, it is required to open the laptop and connect custom (but cheap) hardware to the motherboa…

Amateur-me thinks that it would not be too hard to prevent such an attack: Have a voltage fault detection circuit at all (TPM-relevant) supply pins that hard-locks the chip until it gets power cycled, and have those circuits be powered by on-chip capacitors that survive just a little longer than their time-to-trigger. Would that be feasible?

Your idea roughly goes into the direction of what the industry has started implementing: Tunable Replica Circuits:

https://www.intel.com/content/www/us/en/newsroom/news/the-st...

Re: faulTPM: Exposing AMD fTPMs' Deepest Secrets

#100

Earlier quoted context omitted.

[flagged]

I'm a windows user since 3.1 and don't know much about linux except the few trials and my pihole. What's the impact of having systemd (or not) for the everyday layman like me that just uses Visual Studio Code to build flutter apps ?

most of the general purpose distributions use systemd. Almost every general purpose distro you've ever heard of. They all adopted it by choice, because they thought it was a better option than the alternatives for one reason or the other.

Basically, don't worry about it.

Post reply on HN