2 ms·
If it really matters, Apple can bring an update that blocks these attacks. If the system depends on security through obscurity, sorry, that never lasts.
by tinus_hn 6y ago
If it really matters, Apple can bring an update that blocks these attacks. If the system depends on security through obscurity, sorry, that never lasts.
- saagarjha 6y agoApple cannot update this away; the vulnerability goes down to the very lowest levels of the software to the code burned into ROM.
- selectodude 6y agoThey were able to update it away on the iPhone X. Checkrain doesn’t work on iOS 14 anymore.
- saagarjha 6y agoWell, somewhat. They’re doing a clever side channel based on the SEP’s RNG to panic the device when booting from DFU, but this has already been bypassed on older devices via a bug in SEPROM. I believe they already have code execution in the A11’s enclave as well, but that one has some sort of replay protection that complicates matters.