4 ms·

Iphones have built in security backdoor called trust apple code signing. That is the foundation of their walled garden. So far Apple seem to protect it pretty

Iphones have built in security backdoor called trust apple code signing. That is the foundation of their walled garden. So far Apple seem to protect it pretty well. They show that only the good guys can control the backdoor argument is not without merit.

Retric 9y ago
For one system, over a few years when few people are trying to break in sure. But, the history of those trusted systems is terrible overall. Look at video game consoles for example and it's not just one or two that but all the major companies that tried generally several times each. EX: https://nakedsecurity.sophos.com/2012/10/25/sony-ps3-hacked-for-good-master-keys-revealed/ https://nakedsecurity.sophos.com/2012/10/25/sony-ps3-hacked-... And no the US government has not done much better.
- panzer_wyrm 9y ago
  I do not support the walled garden, mandatory code signing from anybody but the owner and so on. People should control their devices. I just point that apple show that keeping keys really works. I don't think that console jailbreaks are from leaked keys (except ps3) but from normal exploits.
  - Retric 9y ago
    There has been several different leaked keys for different systems. Remember, Blue Ray had the same issue five different times in 06, 08, 09, 11, and 12. https://en.wikipedia.org/wiki/AACS_encryption_key_controversy https://en.wikipedia.org/wiki/AACS_encryption_key_controvers... Also, maintaining back doors would be a significantly harder problem than just keeping keys on a server used to sign things. Apple can for example keep the keys on an offline private server, but that's not really viable if 10 or 100's of thousands of people across multiple agency's of state, local, and federal law enforcement need access to break into things. Worse you could quickly find nobody outside the US would be willing to use our software or services.
- deleted 9y ago
  [deleted]
- CM30 9y ago
  Another example along those lines is the NES Classic Mini. Doesn't connect to the internet, doesn't let you write anything to the console and doesn't come with anything like games to buy or extra storage mediums to use. Yet within weeks, people had hacked it wide open and stuck hundreds of ROMs on it.
marcosdumay 9y ago
> So far Apple seem to protect it pretty well. That we know of. It's also important to remember that the only public trial against that backdoor was only for show, and despite not officially breaking it, the attacker got everything on the phone anyway.

Retric 9y ago

For one system, over a few years when few people are trying to break in sure. But, the history of those trusted systems is terrible overall. Look at video game consoles for example and it's not just one or two that but all the major companies that tried generally several times each. EX: https://nakedsecurity.sophos.com/2012/10/25/sony-ps3-hacked-for-good-master-keys-revealed/ https://nakedsecurity.sophos.com/2012/10/25/sony-ps3-hacked-... And no the US government has not done much better.

panzer_wyrm 9y ago
I do not support the walled garden, mandatory code signing from anybody but the owner and so on. People should control their devices. I just point that apple show that keeping keys really works. I don't think that console jailbreaks are from leaked keys (except ps3) but from normal exploits.
- Retric 9y ago
  There has been several different leaked keys for different systems. Remember, Blue Ray had the same issue five different times in 06, 08, 09, 11, and 12. https://en.wikipedia.org/wiki/AACS_encryption_key_controversy https://en.wikipedia.org/wiki/AACS_encryption_key_controvers... Also, maintaining back doors would be a significantly harder problem than just keeping keys on a server used to sign things. Apple can for example keep the keys on an offline private server, but that's not really viable if 10 or 100's of thousands of people across multiple agency's of state, local, and federal law enforcement need access to break into things. Worse you could quickly find nobody outside the US would be willing to use our software or services.
deleted 9y ago
[deleted]
CM30 9y ago
Another example along those lines is the NES Classic Mini. Doesn't connect to the internet, doesn't let you write anything to the console and doesn't come with anything like games to buy or extra storage mediums to use. Yet within weeks, people had hacked it wide open and stuck hundreds of ROMs on it.

marcosdumay 9y ago

> So far Apple seem to protect it pretty well. That we know of. It's also important to remember that the only public trial against that backdoor was only for show, and despite not officially breaking it, the attacker got everything on the phone anyway.