posted in Technology
The security co-processor in many CPUs is insecure
www.heise.de/en/news/The-security-co-processor-in-many-CPUs-is-insecure-11411956.html
Well that’s OK; we recently discovered that things like passkeys usually aren’t using the TPM anymore anyway. Most stuff stored in there can be routed around via tokens stored on main storage.
Though the FIDO2 has security level 1 to 3 and anything above lvl 1 can basically not be fulfilled by open hardware keys, since level 2 requires documented supply chains and expensive certificates.
Source: a journey with my govt. login portal.