Sorry, SecureBoot is implemented in the very firmware you can own when WP is busted... so Windows will happily believe all is good. That's the point of these types of vulnerabilities.

The TPM point would be valid if you actually manually configured which PCRs will cause BitLocker and remote attestation to fail. By default the firmware ones are NOT setup this way. Even if they were, it the attacker knew the expected measurements (from the original firmware), TPM has no signing on measurements and therefore you could fake the old numbers by self measuring.

Please read the letter USBIF wrote to Palm -- they *expressly* stated that usage of the VID/PID in this manner is a supported and expected function of the USB standard. They are using their VID/PID exactly in the way it was intended for.

Erm, Acetaminophen is not a "Brand name", it is called a "Common name" or "Generic name". And guess what, so is Paracetamol, the European "Common name". A "brand name" is Parocet or Tylenol.

So I guess Europeans have a little bit more trouble differentiating brand names from common names, or were you just trying to get everyone to switch over to the European way of naming things?

The drug name is "N-(4-hydroxyphenyl)acetamide", FYI.

A bit of a shameless plug, but if you'd like more information on these "shims", I've started a series of articles on the technology (still hoping to complete it shortly) on my blog at http://www.alex-ionescu.com/?p=39. FYI, there's over 8000 of them in Windows today, and each time you launch an app, these checks are made.

That should've been "6.999 million".

Also, to clarify, a soft page fault is when a page is migrated from the standby list to the working set -- which is several orders of magnitude less expensive then a hard fault. Except for some TLB issues, there's no significant performance issue, and no disk access in any case.