Thus is the video of my TPM interpose presentation and demo at #OSSummit

https://m.youtube.com/watch?v=WK7NERQXh4I

@pid_eins so I also gave some advice on how apps can detect instantly, but they have to salt sessions using the null seed to benefit from this.

@pid_eins @jann @Foxboron no, its active. If the kernel detects a reset attack it disables the TPM. It takes the kernel about a minute to detect because it has to ping the TPM to detect, which usually happens with RNG reseeding.

@jann @Foxboron @pid_eins since 6.10 the Linux kernel will detect and mitigate reset attacks. I demoed this working in my #OSSummit talk in Tokyo this week. The video should be up on YouTube.

Had fun in at #OSSSummit in Tokyo yesterday demonstrating a TPM interposer attack obtaining the systemd cryptenroll boot keys

https://sched.co/1jKCe

And also explaining how the new Linux Kernel TPM patches can help defeat this

For those who asked, my python3 interposer designed to steal the keys is here:

https://git.kernel.org/pub/scm/linux/kernel/git/jejb/tpm2-interposer.git/

@LaF0rge hey, if you're going to the compliance summit that's great news! see you soon.

@LaF0rge I tried to begin the explanation here

https://lore.kernel.org/all/e7d548a7fc[email protected]/

But I'm a bit hamstrung because the legal document isn't yet public

@LaF0rge the problem with your analysis is that while we may understand how a community works, the Treasury (sanctions enforcer) doesn't. It operates on the assumption that employees always act at the direction of their employer, and that every organization behaves like a corporation.

@vathpela how do you know is not a heat pump? Air source heat pumps can go to -10C or sometimes colder to provide heat in cold weather.