TPM Windows devices aren’t that safe, according to researchers

guest · Aug 1, 2021

TPM Windows devices aren’t that safe, according to researchers
July 30, 2021
https://windowsreport.com/windows-11-tpm-vulnerabilities/

Even though Microsoft preached the enhanced safety we were going to receive via TPM chips, an attack is not even remotely impossible.

If one of our windows 11 devices were to fall into the wrong hands, the device itself and the network it's connected to would be compromised.

Experts proved that, with the right set of skills, even the TPM 2.0 security chips can become easy prey for malicious entities looking to extract our data.

Microsoft might want to take a closer look at these security features and maybe even revise its strategy, while there is still time do so.

Click to expand...

Microsoft held its ground and kept reassuring people that this TPM requirement is for their own safety, because of the enhanced level of protection it was going to offer.
We’re not as safe as Microsoft wants you to think
The tech giant showed an iron will when it came to not cracking under public pressure, especially after the backlash that the TPM 2.0 requirement brought with it from the community.

They advertised this hardware feature as it if was their own and said that users were going to be protected because of this tiny chip.
Click to expand...

Experts from Dolos Group found out that, in fact, if one of us were to lose his laptop or have it stolen, TPM could do little to prevent hackers from wreaking havoc.

At the time of this writing, BitLocker does not utilize any encrypted communication features of the TPM 2.0 standard, which means any data coming out of the TPM is coming out in plaintext, including the decryption key for Windows. If we can grab that key, we should be able to decrypt the drive, get access to the VPN client config, and maybe get access to the internal network.
By using this exploit together with other ingenious schemes, researchers were able to take a stolen corporate laptop (as a scenario) and effectively gain access to its associated corporate network, leaving data exposed and vulnerable.
Click to expand...

Freki123 · Aug 1, 2021

https://www.golem.de/news/verschlue...er-trotz-tpm-schutz-umgangen-2107-158524.html
Linked that as countermeasures:
https://docs.microsoft.com/en-us/wi...cker-countermeasures#attacker-countermeasures

Just wanted to name the source to be fair even if its german. Solution is in english

Log in or Sign up

TPM Windows devices aren’t that safe, according to researchers

guest Guest

Freki123 Registered Member

Log in or Sign up

TPM Windows devices aren’t that safe, according to researchers

guest Guest

Freki123 Registered Member

Useful Searches