logoalt Hacker News

mjg59 • today at 6:00 AM • 1 reply • view on HN

Yeah I'm actually not terribly worried about the server scenario, but having a way to get code exec in the firmware lets you defeat measured boot, which means this is a Bitlocker bypass in the default config.


Replies

reorder9695 • today at 7:50 AM

Would this mean any TPM based decryption keys could potentially be compromised in this kind of attack? E.g. when they're used for LUKS disk encryption.

➕ show 1 reply