3 ms·
>iOS already, today, for no other reason than to prevent downgrades, verifies every firmware upgrade/restore with an Apple server, which sends back a per-device
by tw04 10y ago
>iOS already, today, for no other reason than to prevent downgrades, verifies every firmware upgrade/restore with an Apple server, which sends back a per-device signature.
Are we pretending now that the government couldn't MITM and fake the response? I think they've proven they can MITM pretty much ANYTHING their hearts desire.
- zbyte64 10y agoThey literally have the tools to do just that.
- willstrafach 10y agoNo they do not. The device will not install a firmware if the restore is not signed by Apple's private key.
- comex 10y ago> Are we pretending now that the government couldn't MITM and fake the response? I think they've proven they can MITM pretty much ANYTHING their hearts desire. Only if they have Apple's private keys or can break RSA...
- tw04 10y agoI hope the ... was because you're aware they already broke RSA. http://www.theverge.com/2013/12/20/5231006/nsa-paid-10-million-for-a-back-door-into-rsa-encryption-according-to http://www.theverge.com/2013/12/20/5231006/nsa-paid-10-milli...
- comex 10y agoWrong RSA. I'm referring to the algorithm, not the company.