4 ms·
So what you're saying is it's possible, but your speculation is different to my speculation? I'm not sure it's useful to have a battle of hypotheses and assump
by sjwright 11y ago
So what you're saying is it's possible, but your speculation is different to my speculation?
I'm not sure it's useful to have a battle of hypotheses and assumptions couched in the language of confidence and certainty.
- ajross 11y agoI'm saying that placing bets on the security of devices based on speculation is a bad idea. Lots of people seem to want to hide behind the "iPhone can't be snooped" shield that has been built in this community, and to my reasonably well-informed eyes that's misguided. But even on the technical side, my point was stronger: the fact that the enclave firmware was just updated to behave differently without wiping the data that it controls argues very (very!) strongly that the "snoop-proof" feature you believe exists... doesn't.
- sjwright 11y agoI agree, we shouldn't be placing bets. I wasn't. I was just saying that it is technically possible to implement a secure enclave that can protect its data against firmware updates while the device is locked. The fact that the enclave firmware can be seamlessly updated while in an unlocked state is not evidence that the enclave firmware can be seamlessly in a locked state.