Hard to gage whether on Windows one has access to these APIs without being an Ad... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		WirelessGigabit on Feb 28, 2023 \| parent \| context \| favorite \| on: TCG TPM2.0 implementations vulnerable to memory co... Hard to gage whether on Windows one has access to these APIs without being an Administrator.

Cyph0n on Feb 28, 2023 | [–]

I’m a total security noob, but I’d wager that privilege escalation is a piece of cake relative to key extraction from a TPM.

AstralStorm on March 2, 2023 | | [–]

Not on fully secured Windows with Device Guard, Credential Guard, HVCI and mitigations on it is not.

The defaults are lax garbage though.

gerdesj on March 1, 2023 | [–]

The article says "authenticated user".

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact