3 ms·
Phew, that's a solid model! No software ever had both remote holes and local privilege escalation!
by justapassenger 8y ago
Phew, that's a solid model! No software ever had both remote holes and local privilege escalation!
- PascLeRasc 8y agoWhat do you want instead? You seem to be pushing for hardware isolation and when Apple goes and does that, putting encryption and a few other features on its own chip designed to be more secure than the CPU, that's not a good thing?
- klodolph 8y agoSarcasm aside, this is part of a strategy called “defense in depth”, the general idea is that no part of your system can be completely secure so you add different types of layers to your security just to make it more difficult for attackers. Since the T2 does not need to run user software there are additional options available to make it more secure which are not available for ordinary CPUs. For example, you could completely prevent executable code from being loaded without resetting the chip.