3 ms·
The private signing key can and should be stored only offline. It's presumably only used when new OS updates need to be signed, and as a result it's fine to req
by ryukafalz 11y ago
The private signing key can and should be stored only offline. It's presumably only used when new OS updates need to be signed, and as a result it's fine to require manual intervention during that process.
By contrast, putting a device with the modified firmware on the network and allowing it to be accessed remotely makes it a much easier target than the private signing key. A compromise still isn't likely, mind you, but that's a pretty damn attractive target.
- abalone 11y agoThat's a good point about the private key never even touching a network. Here's a thought: if the crack firmware does leak, and Apple becomes aware of it, could they just push out an OS update that rotates the signing key? That should effectively disable it, once updated. What I'm getting at is this seems more about resisting government abuse / repressive regimes than technical infeasibility of limiting it to authorized users.