5 ms·
I'm curious to see how this turns out, especially considering things like TouchID which is paired to the Secure Enclave. Allowing anyone to perform that pairing
by axoltl 10y ago
I'm curious to see how this turns out, especially considering things like TouchID which is paired to the Secure Enclave. Allowing anyone to perform that pairing fundamentally undermines their security model.
- kevin_thibedeau 10y agoThere's no reason for the physical sensor to be combined with the key/credential storage other than to intentionally interfere with third party replacement parts.
- mitchty 10y ago"no reason"? I can think of one, maybe they pair them at assembly time using a public/private key exchange. If they change, have to change both.
- schoen 10y agoApple claimed to have a security reason that was in the interest of the user and not only anticompetitive; does someone have a link to an article explaining this? I remember reading about it at the time.
- manicdee 10y agoHere is one article I found, the basic claim is that the Touch ID sensor is (cryptographically?) paired to the secure enclave and replacing it requires Apple magic sauce to revslidste the sensor/enclave pairing. https://9to5mac.com/2016/02/05/error-53-iphone-6/ https://9to5mac.com/2016/02/05/error-53-iphone-6/
- schoen 10y agoThanks for the reference!