3 ms·
It doesn't help. All the passwords can be enumerated using the OS API. It would actually be a lot easier to gather passwords if all applications used the OS st
by user5994461 9y ago
It doesn't help. All the passwords can be enumerated using the OS API.
It would actually be a lot easier to gather passwords if all applications used the OS store.
- azinman2 9y agoBut you still need to unlock the keychain to get those... so what’s the difference? If anything, the new iMac pro has a Secure Enclave, which means we can soon expect in some number of years that most computers will as well.
- user5994461 9y agoNot correct. Unless you're specifically talking about some stuff by Apple. Do you know that windows has had password stores for many decades?
- seandougall 9y agoWhich part was not correct? macOS does indeed have, and has long had, a keychain API, if that’s the part you’re thinking of.
- still_grokking 9y ago> If anything, the new iMac pro has a Secure Enclave, which means we can soon expect in some number of years that most computers will as well. I don't know about Macs but PCs have a Smart-Card like Chip called TPM build in for about 20 years by now. One of the main functions a TPM offers is the secure storage of encryption keys. I wonder such a feature comes only now to Macs with about two decades of a delay?
- lclarkmichalek 9y agoI mean, TPMs only started appearing in laptops in the mid 2000s, but whatever. Unlike the TPM on most non-Apple laptops I've bought recently, the OSX secure enclave does significantly impact the security of the system. I don't know why Apple decided to create their own instead of using the standard TPM, but they've done a pretty good job of using it, unlike most other hardware vendors.