>apple
>security
pick one
>>61973480
Well, shit...
>>61973480
I knew this thread would exist. As for the hack, it was only a matter of time I suppose.
So more fappenings?!
Fuck yeah.
damn..
>>61973480
>>apple
>>security
>pick one
They have access to the enclave code, but they can't access the data.
>>61973658
>They have access to the front door of the house, but there's a small dog that barks a lot behind it.
err, I haven't read the paper/watched that presentation, but, from the looks of it... AFAIU, it will be some time (months, perhaps years) before they even get to jailbreak these phones or manage to decrypt data..
meanwhile, android still doesn't provide as much security as the iphones.
>inb4 apple shill
https://www.blackhat.com/docs/us-16/materials/us-16-Krstic.pdf
>>61973705
you are fucking retarded, don't you? lol
que sera
whatever will be, will be
i only use gnu you see
que sera
>>61973770
>or manage to decrypt data
Break encryption? Not going to happen.
>using fingerprint scanner to access
It was never secure in the first place. All you had to do was chop someone's finger off.
>>61973776
>apple in charge of security
>>61973936
Ah shit you're right, I've been such a fool.
>>61973480
iTODDLERS BTFO
>>61973658
>>61973770
The average Apple users keeps everything in the cloud anyways, encryption is literally placebo.
>>61974088
What fappening wave are we on now? I've lost count.
>>61973480
this is actually a good thing, the SE firmware was a blackbox for all this time, now researchers can actually poke around and find holes.
OTOH, Apple only provides 100,000 for a successful exfiltration of data from the SE. That is pathetically low, such an exploit is easily million+ material elsewhere.
>>61974001
Exactly. With a password, they at least have to torture you to get it out of you. A fingerprint, retina, etc. scan is basically you asking a hacker to hire someone to dismember you.
>>61974142
Not entirely a good thing.
We don't know if SE can be updated, so any vulnerabilities they find could be unpatchable.
But what it could mean is greater ease of getting into such devices for law enforcement.
>>61974248
>We don't know if SE can be updated
It can and it has, iOS updates can also include updates to the SE itself. Read the iOS Security Whitepaper.
>But what it could mean is greater ease of getting into such devices for law enforcement.
Its one less (although insignificant in comparison to other things) barrier for LE to tackle. The data is still encrypted, data going in/out of the SE is still encrypted. This gives them the firmware, so they are getting ever closer to the holy grail, but there are other measures in place that need to be defeated as well.
The problem (for Apple) now is that any found vulnerabilities in the SE firmware are not going to make their way back to Apple unless they up the payout for finding such things. You can bet your left nut that Zerodium and the like are going to be offering far more than $100,000 for a successful SE exploit.
>>61974345
I see.
It is really going to depend on what sort of vulnerabilities are found in the SE firmware and whether Apple is competent enough to patch it properly (they don't have the best history).
>>61973984
lol you're just fucking retarded dude every webpage or OS has diagnostic capabilities aka backdoors from Facebook to 4chan, from Windows to Linux
>>61974458
Nah, you're just an idiot :^ )
>>61974458
I'm sorry but that's fake news.
A backdoor implies a way to bypass security.
What are you talking about for 4chan? A way into the admin area without entering a password or a master password? Or direct access to the machines?
>>61974599
Apple users are renowned for having more money than brains.
>>61974698
>more money than brains.
It's especially comical when you consider how little money they have to begin with.
>>61973805
oh hey i like that song
>>61974698
That's a nice way to avoid the question.
>>61973776
Aren't*
>>61974599
>tfw when 4chan runs on mac minis
>>61976672
Hasn't for a long time now.
>>61974754
That picture is frighteningly accurate. I know a Saudi girl who came to study at my uni before returning home. She tells me her parents are struggling financially but always make sure to buy new iPhones because they see it as a status symbol
Apple's Secure Enclave firmware is now open source against their will. This has nothing to do with the security of the data in Secure Enclaves.
Why do people come here and retardpost to start threads? Do you know of no other way to start a conversation, other than getting someone to correct you? That's really, really sad.
>>61974159
The passcode has also been broken.
https://youtu.be/IXglwbyMydM
https://www.macrumors.com/2017/08/18/ios-11-passcode-box-bug-fixed/
>>61973480
Hello fellow hackaday reader