4 ms·
> It’s a black box that we’re not supposed to know anything about Nope. Apple published a whitepaper that details how the SEP works.[1] Decrypting the firmware
by abalone 9y ago
> It’s a black box that we’re not supposed to know anything about
Nope. Apple published a whitepaper that details how the SEP works.[1] Decrypting the firmware does help researchers look for vulnerabilities in the implementation, but it's not like Apple is relying on it being a black box.
[1] https://www.apple.com/business/docs/iOS_Security_Guide.pdf https://www.apple.com/business/docs/iOS_Security_Guide.pdf
- Cyph0n 9y agoCan you point out the section in that whitepaper that describes SEP in detail? Because all I see is a high-level marketing document.
- abalone 9y agoSays the PhD candidate in hardware security. You may want more low-level details but it's inaccurate characterize it as "marketing". That's just snark. It presents numerous details on the implementation of the SEP throughout the document.
- Cyph0n 9y agoThe article claimed that SEP is a black box, which you strongly denied based on the contents of the security whitepaper. But when confronted, you failed to present which part of the document presents how SEP is implemented in detail. If you would like to avoid such replies in the future, try to avoid making strong, absolute statements. When I talk about topics I am unfamiliar with, I tend to use phrases like "I think" and "I believe" quite sparingly. > Says the PhD candidate in hardware security. Again, the fact of the matter is that the Apple security whitepaper is a marketing document. I'm not sure what my background has to do with that though.
- johneth 9y agoThere's a video of a presentation by Ivan Krstic (head of security engineering, Apple) at Black Hat from 2016 about iOS security: https://www.youtube.com/watch?v=BLGFriOKz6U https://www.youtube.com/watch?v=BLGFriOKz6U