Submitted 8 months ago by L4s@lemmy.world [bot] to technology@lemmy.world
Microsoft’s Bitlocker & TPM encryption combo defeated with a $10 Raspberry Pi::The point of Microsoft’s Bitlocker security feature is to protect personal data stored locally on devices and particularly when those devices are lost or otherwise physically compromised. With Bi
Fake news. Nobody is getting a raspberry pi for $10 lol
I get your joke, but it’s even cheaper than a “Raspberry Pi”. Pi Pico, one RP2040 chip, that’s basically RPi’s new version of a Teensy. I just installed one in my GameCube to defeat its “BIOS” and boot from micro SD card :P
I just installed one in my GameCube to defeat its “BIOS” and boot from micro SD card :P
Coolest thing I heard all day. Didn’t know that was a thing.
It’s a Zero W. $15
Yeah, is a Pico… $5
With shipping it’s more than ten but on it’s own it’s 6,10 for the H model
BAN RASPBERRY PI’S!
BAN COMPUTERS!
There probably will someday be a push to prevent common normal people from having access to computer systems that offer the user root or superuser access.
Someday? Canada is already trying to ban the Flipper Zero, we’re living in your nightmare.
We’re gonna have problems getting enough software engineers in the future. How is anyone supposed to learn when everything is locked away. It’s already happening in the repair industry and the trades.
This is already happening with smart phones.
No one wants LGA1155 anymore anyway so it’s Gucci, my i7-2600 was far past it’s life span 5 years ago
Yet another example of “hardware access is root access”
As it should be really so you can repair things.
I agree
$10… not really in video. He had a custom PCB made so the pogo pins were on the board, all in one.
Honestly, pretty awesome. Although as noted, this is for older boards without TPM integration in CPU.
It can also be done with a logic analyzer.
The pi is $10. The rest is much more.
That is a PI Nano. They gave them away for free at a trade fair. I’ve got a bag of them laying around for my next project.
Pis are 10$ again? That’s the real story.
It’s a Pi Pico (RP2040). It’s an MCU, not CPU. Similar to an Arduino board (ATmega328p).
What IPO do to a mf
Isn’t the whole point of BitLocker protection from direct access? When a computer is turned off, encryption should keep the data safe. Also when a computer is turned off, basically no remote vector is going to work. AFAIK, when the computer is on, the drive is mounted and BitLocker provides no additional protection over an unencrypted drive.
Correct. However, if you have a way to run a PowerShell command as an administrator, you can run a single cmdlet to get access to the bitlocker recovery key.
The concept of TPM has been a joke since inception.
Unsurprised. Physical security seems to be a lot tougher for the industry to “nail”
Just look at this UEFI boot fail vuln/exploit. Crazy.
Yet we still can’t crack Denuvo…
Hey - hey member that time when Truecrypt was like, “Peace, we out. Use bitlocker. lol”
When’s the new Truecrypt coming out? Yeah yeah Veracrypt, I know. It’s cool, its just not. I dunno.
Veracrypt does fine
I know, I know.
Requires physical access. A non-story outside of cybersec academia/research
Bitlocker’s threat model is physical access, though. And it’s 50% of TPM’s threat model too.
Yeah which is why no one cares about either
This is categorically false. Laptops are not a story but rather company property.
Godort@lemm.ee 8 months ago
It should be noted that this attack was demonstrated on a nearly 10 year old laptop that has the TPM traces exposed on the motherboard.
Most TPMs nowadays are built into the CPU which does not leave them vulnerable to this type of attack.
jabathekek@sopuli.xyz 8 months ago
Too late, Canada’s banned Raspberry Pi’s already. :(
surewhynotlem@lemmy.world 8 months ago
I don’t get the downvoting. This is solid commentary on the Flipper Zero idiocy.
cheese_greater@lemmy.world 8 months ago
Its definitely sort or misleading but MS needs to really have its feet held to the fire when it comes to these things. It sort of pushes the narrative in the correct direction which is towards privacy AND security, not a half-ass balance where one or the other or both is compromised or is an illusion altogether
Shadow@lemmy.ca 8 months ago
Because MS designed Lenovo motherboard for them and told them where to put the tpm debug pins? I think you’re casting blame at the wrong vendor here.