3 ms·
This article leaves two billion-dollar market opportunities on the table: Online testing and multiplayer gaming^. Apple’s recent announcement of a web authenti
by floatingatoll 6y ago
This article leaves two billion-dollar market opportunities on the table: Online testing and multiplayer gaming^.
Apple’s recent announcement of a web authentication API includes if your system is booted in fully secure mode^ an attestation that the OS is in secure mode, crypto-signed by the secure kernel whose
own signature is by Apple.
This provides something that no desktop/laptop today can provide: certainty that the user isn’t tampering with the operating system to try and cheat. The entire stack, from hardware to UI, is signed and verified to have integrity, and modifying any component of the stack will result in the “secure” attestation being withheld. So instead of having to deal with insane anti-cheating spyware and kernel extensions and system monitoring, testing software and multiplayer game modes can simply require you to be in secure mode to login.
This is available today, immediately, if anyone were to implement it. Of course no one has yet, because no one is thinking of the iOS and macOS platforms as tamperproof computing for the Internet world, and so Apple’s quiet announcement of this in a technical API footnote has gone unnoticed.
Apple will probably always let you shut off anti-tampering on macOS with reboots and terminal commands, and then you can tamper to your heart’s content, but they will never allow your system to attest that it’s in tamperproof mode to third-parties, and that crypto signature can’t be spoofed since the Secure Enclave is involved in generating it.
This ‘tamperproof’ market opportunity is worth billions of dollars, and Apple made it there first. I can’t wait to see what happens when all the industries that suffer undetectable tampering today realize this.
^ Multiplayer FPS developers have had little incentive to develop for Metal prior to now, but Apple Silicon has the capability to easily unseat 5950X/GTX3090 as peak PC gaming performance for a tiny fraction of the cost and heat. Someday the Apple TV will get an Apple Silicon chip that can run FPS games using Metal at 4K/60/HDR, which should noticeably alter that cost-benefit equation.
^ I believe this is signed-sealed OS partition, SIP enabled, kernel extensions disabled; though I may have missed one or two bits.
- nayuki 6y agoWhat about this scenario?: A gamer wishes to cheat. They run the game on an unmodified, tamperproof, attested computer as per your description. Then they attach the HDMI output to a video capture card on a secondary computer, run some artificial intelligence software, and send back automated commands using a USB mouse and keyboard. Given that this kind of attack/circumvention is possible, are you sure that an attestable computer is a worthwhile goal?
- floatingatoll 6y agoYes, because unlike today, that’s not a software-exclusive attack that can be sold online without shipping a physical product. (Games can also trivially enable HDCP to defend against that sort of attack in the majority of cases where it’s even possible to construct it at all, setting aside the chances of successfully asking a neural net to decode a game’s video signal and cheat effectively — and since the entire stack is attested secure, cheaters can’t use hacked video drivers that spoof HDCP, either.)
- floatingatoll 6y agoSee also today’s parallel discussion about Microsoft Pluton providing remote attestation in exactly this manner for Azure cloud servers and, eventually, all consumer x86_64 CPUs: https://news.ycombinator.com/item?id=25192681 https://news.ycombinator.com/item?id=25192681