4 ms·

I don't think it's so obvious what the vulnerability is... or apple would want to patch it

• earenndil 7y ago
  Apple can't patch it. It's a fundamental limitation that, somewhere on the device, is stored a key; if you can extract that key, then you can run brute-force on it as much as you want from a supercomputer. And it has to be extractable because the phone itself has to use it.
  • 6nf 7y ago
    The Secure Enclave prevents this
    • tpetry 7y ago
      The secure enclave SHOULD prevent this! The cellebrite people found some vulnerability, but we dont know in which component.
    • earenndil 7y ago
      It's supposed to. We don't even know for sure that there's a flaw in it; they might have just bypassed it, found a way to read the flash memory directly.
      • tptacek 7y ago
        The memory used by the SEP is encrypted.
        • earenndil 7y ago
          With a key. Which is stored in SEP hardware. Which could, in theory, be extracted.
          • tptacek 7y ago
            I'm not saying extraction is technically impossible, just that you can't simply bypass the SEP and read its flash the way hardware reversers do with other embedded systems.