Reputation
903
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
7 18
Newest
 Necromancer
Impact
~22k people reached

Oct
31
awarded  Necromancer
Oct
29
comment LUKS TPM disk encryption attacks
Take a look at this recent research - DDR3 still affected: youtu.be/ZHq2xG4XJXM
Oct
19
comment Can a TPM's EK's public key (hash) be used to fingerprint a device?
Understood. I'll add some clarifications.
Oct
18
awarded  Suffrage
Oct
18
awarded  Vox Populi
Oct
18
revised “Memory Sinkhole” attack and virtual machines?
add smm tag.
Oct
18
suggested approved edit on “Memory Sinkhole” attack and virtual machines?
Oct
18
answered “Memory Sinkhole” attack and virtual machines?
Oct
18
awarded  Informed
Oct
18
comment Is it possible for my employer to replace the root CA on my phone?
+1 for the MDM part which is pretty important and missing in the accepted answer.
Oct
18
comment Can a TPM's EK's public key (hash) be used to fingerprint a device?
I don't see that the EK can be reset by the end-user in any of your references. Can you be more specific? As far I know, it is not possible and would defy the purpose. If any reset was possible, it would require the involvement of the manufacturer as he's the only one who can attest whether this is a real/valid TPM and the EK is properly secured to TCG standards.
Oct
18
revised Can a TPM storage key used to generate encrypt leaf key (child key) if it is stored outside TPM?
add trusted computing tag
Oct
18
comment How to use TPM to perform platform authentication?
Thanks for the correction. I agree my statement could be interested.
Oct
18
suggested approved edit on Can a TPM storage key used to generate encrypt leaf key (child key) if it is stored outside TPM?
Oct
18
awarded  Yearling
Oct
17
comment Will a wildcard SSL work properly for an A record subdomain pointing to another domain/website?
Does this answer your question? If so, can you accept the answer?
Oct
17
comment LUKS TPM disk encryption attacks
Typical... offensive researches gets all the hype and defensive gets almost nothing. Still, the conclusion aren't really rock solid and leaves place to some other - more complex - attack vectors (i.e. building a custom memory controller).
Oct
17
comment LUKS TPM disk encryption attacks
I know some manufacturers were working on fixing this but haven't seen anything and I'd be very surprised if it would fix entire set of technology,i.e. ddr3/4 as a whole. Can you share the article? I'll do some research on my side.
Oct
17
answered What is the most “out-of-the-box” secure OS for a home user?
Oct
17
revised LUKS TPM disk encryption attacks
clarification