4 ms·

> it’s also slightly worrying that a whole class of iOS devices have a severe and unpatchable security flaw. "Severe" is a bit over-dramatic. To be accurate, f

by ethbro 7y ago

> it’s also slightly worrying that a whole class of iOS devices have a severe and unpatchable security flaw. "Severe" is a bit over-dramatic. To be accurate, from the article: Checkm8 requires physical access to the phone. It can't be remotely executed, even if combined with other exploits The exploit allows only tethered jailbreaks, meaning it lacks persistence. The exploit must be run each time an iDevice boots. Checkm8 doesn't bypass the protections offered by the Secure Enclave and Touch ID.

matwood 7y ago
> "Severe" is a bit over-dramatic. To be accurate, from the article: Agreed. The hyperbole yesterday was millions of iPhones now have no security which does not seem to be the case. For the average user nothing has changed. For the paranoid, reboot the phone if it ever leaves your sight.
- owl57 7y ago
  It's not easy to pull battery out, so we are left with a force-reboot button chord. That feature is probably meant to protect from normal, non-malicious bugs. How sure can the hypothetical paranoid be that the phone has indeed rebooted and not faked it?
  - givinguflac 7y ago
    The hypothetical user can be certain if they simply do a force reboot by holding power and volume, instead of shutting down using the power button long press and touch screen swipe.
    - mtsr 7y ago
      Why? Is there any way to be certain these are done in hardware and can’t be caught in a low level system once the device is rooted? It’s a black box, so no way to know until somebody manages to pull it off.
      - ofcourseianal 7y ago
        Yes
      - a_t48 7y ago
        Yup - this combination works even if the device is hung.
      - jscholes 7y ago
        > Is there any way to be certain these are done in hardware and can’t be caught in a low level system once the device is rooted? If you suspect your device has been tampered with and need a guaranteed reboot, just let the battery run down and don't use it until it has.
        alt219 7y ago
        > If you suspect your device has been tampered with and need a guaranteed reboot, just let the battery run down and don't use it until it has. Just a (overly paranoid) thought: a sophisticated attacker could simulate a drained battery and subsequent reboot, no?
        sildur 7y ago
        No sophisticated attacker can make a phone run for five days without recharging. Just leave it on for five days and you should be fine.
      - earenndil 7y ago
        I can implant a tiny microchip into your phone that will intercept every disc read/write and transmit it. Is that something it makes sense to check for, though?
        fragmede 7y ago
        These days, it's easier to thwart the Evil Maid attack, as it's known, by replacing the device, and some recommend doing that when entering/exiting China, attending DefCon, and a few other scenarios where it's credible under a given threat model. Most of us aren't Edward Snowden, but are still cases where thats not so ludicrous. The FBI has installed keyloggers into laptops supposedly fresh from the factory that have been discovered before. It's not just specific person devices, either. Aspersions were cast on Supermicro motherboards installed into Cloud provider data centers, even if nothing was ever found/proven.
  - GhettoMaestro 7y ago
    I believe the force-reset button combination is a firmware (read-only) routine for that reason. See: https://support.apple.com/guide/iphone/force-restart-iphone-iph8903c3ee6/ios https://support.apple.com/guide/iphone/force-restart-iphone-...
    - owl57 7y ago
      Firmware updates are a thing for other devices. Sure, the force-restart logic should be stored on some separate device that isn't touched by any part of OS other than the firmware updater — but are you sure if it really is or should be read-only?
      - GhettoMaestro 7y ago
        Nope I am not sure. Not going to lie: I do place a significant level of trust in Apple's statements regarding their security architecture / model.
        owl57 7y ago
        I'm inclined to place some trust in Apple too. Is there any statement that force-reboot is a security feature?
deleted 7y ago
[deleted]

by ethbro 7y ago

matwood 7y ago

> "Severe" is a bit over-dramatic. To be accurate, from the article: Agreed. The hyperbole yesterday was millions of iPhones now have no security which does not seem to be the case. For the average user nothing has changed. For the paranoid, reboot the phone if it ever leaves your sight.

owl57 7y ago
It's not easy to pull battery out, so we are left with a force-reboot button chord. That feature is probably meant to protect from normal, non-malicious bugs. How sure can the hypothetical paranoid be that the phone has indeed rebooted and not faked it?
- givinguflac 7y ago
  The hypothetical user can be certain if they simply do a force reboot by holding power and volume, instead of shutting down using the power button long press and touch screen swipe.
  - mtsr 7y ago
    Why? Is there any way to be certain these are done in hardware and can’t be caught in a low level system once the device is rooted? It’s a black box, so no way to know until somebody manages to pull it off.
    - ofcourseianal 7y ago
      Yes
    - a_t48 7y ago
      Yup - this combination works even if the device is hung.
    - jscholes 7y ago
      > Is there any way to be certain these are done in hardware and can’t be caught in a low level system once the device is rooted? If you suspect your device has been tampered with and need a guaranteed reboot, just let the battery run down and don't use it until it has.
      - alt219 7y ago
        > If you suspect your device has been tampered with and need a guaranteed reboot, just let the battery run down and don't use it until it has. Just a (overly paranoid) thought: a sophisticated attacker could simulate a drained battery and subsequent reboot, no?
        sildur 7y ago
        No sophisticated attacker can make a phone run for five days without recharging. Just leave it on for five days and you should be fine.
    - earenndil 7y ago
      I can implant a tiny microchip into your phone that will intercept every disc read/write and transmit it. Is that something it makes sense to check for, though?
      - fragmede 7y ago
        These days, it's easier to thwart the Evil Maid attack, as it's known, by replacing the device, and some recommend doing that when entering/exiting China, attending DefCon, and a few other scenarios where it's credible under a given threat model. Most of us aren't Edward Snowden, but are still cases where thats not so ludicrous. The FBI has installed keyloggers into laptops supposedly fresh from the factory that have been discovered before. It's not just specific person devices, either. Aspersions were cast on Supermicro motherboards installed into Cloud provider data centers, even if nothing was ever found/proven.
- GhettoMaestro 7y ago
  I believe the force-reset button combination is a firmware (read-only) routine for that reason. See: https://support.apple.com/guide/iphone/force-restart-iphone-iph8903c3ee6/ios https://support.apple.com/guide/iphone/force-restart-iphone-...
  - owl57 7y ago
    Firmware updates are a thing for other devices. Sure, the force-restart logic should be stored on some separate device that isn't touched by any part of OS other than the firmware updater — but are you sure if it really is or should be read-only?
    - GhettoMaestro 7y ago
      Nope I am not sure. Not going to lie: I do place a significant level of trust in Apple's statements regarding their security architecture / model.
      - owl57 7y ago
        I'm inclined to place some trust in Apple too. Is there any statement that force-reboot is a security feature?

deleted 7y ago

[deleted]