4 ms·
Correct; more specifically, leaving the KDF retry enforcement behavior writable on locked devices, and in the case of secure enclave, possibly exposing fingerpr
by teacup50 11y ago
Correct; more specifically, leaving the KDF retry enforcement behavior writable on locked devices, and in the case of secure enclave, possibly exposing fingerprint-protected keys themselves to Apple-signed updated firmware.
- pcwalton 11y agoDo you have a source that confirms this? So far everything that I've seen, including the story on Hacker News [1], indicates that we don't know whether the Secure Enclave code can be updated without already knowing the key. [1]: https://www.mikeash.com/pyblog/friday-qa-2016-02-19-what-is-the-secure-enclave.html https://www.mikeash.com/pyblog/friday-qa-2016-02-19-what-is-...
- criddell 11y agoThis doesn't have a link to an Apple source, but it's a little more information: https://www.techdirt.com/articles/20160218/10371233643/yes-backdoor-that-fbi-is-requesting-can-work-modern-iphones-too.shtml https://www.techdirt.com/articles/20160218/10371233643/yes-b...
- 05 11y agoIf you can upgrade a Touch ID enabled iPhone from Recovery Mode (you can), then yes, you can upgrade SE fw without unlocking first.