3 ms·
This comment simply makes claims like altering data in transit inside the architecture of the CPU. Yes, if you can do that, then you can flash anything to the
by hahainternet 11y ago
This comment simply makes claims like altering data in transit inside the architecture of the CPU.
Yes, if you can do that, then you can flash anything to the phone. When someone shows me that happening, then I'll believe in this technology.
- zaroth 11y agoNo, I proposed 3 different ways of hacking the UDID in that comment. 1) disrupting the read of ECID in transit, 2) re-writing ECID by hacking the BPP, 3) a SHA1 hash collision. Any one of the 3 will do. Even then you cannot "flash anything" to the phone. But you can flash a build signed by Apple which hard-codes a UDID check.
- hahainternet 11y agoWouldn't these mechanisms apply to key verification? How exactly can you argue that you can modify data in realtime inside the phone's architecture, but couldn't possibly modify data in realtime inside the phone's architecture?
- zaroth 11y agoOnly certain parts of the hardware responsible for key storage and verification are architected to be resilient against physical and electronic attack, but the entire phone is not. For example changing the WiFi or Bluetooth MAC is not locked down and effects the UDID. Because the UDID was never intended to be a way to bypass the device encryption it was not designed with anywhere near the same level of care and sophistication as handling the encryption key itself.
- hahainternet 11y ago> For example changing the WiFi or Bluetooth MAC is not locked down and effects the UDID. Because the UDID was never intended to be a way to bypass the device encryption it was not designed with anywhere near the same level of care and sophistication as handling the encryption key itself. I never suggested the UDID. Please don't ascribe a claim to me that was never made. SHA512 the serial and macs independently. Job done.
- deleted 11y ago[deleted]