210 - TPMs and Baseband Bugs [Binary Exploitation Podcast]

This week we go a bit deeper than normal and look at some low level TPM attacks to steal keys. We've got a cool attack that lets us leak a per-chip secret out of the TPM one byte at a time, and a post about reading Bitlocker's secret off the SPI bus. Then we talk about several Shannon baseband bugs disclosed by Google's Project Zero.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/210.html

[00:00:00] Introduction
[00:01:14] Spot …

attack attacks baseband binary binary exploitation bitlocker bugs chip exploitation keys leak low podcast secret steal tpm