3 ms·

He's talking about Apple Configurator and yes, it connects to Apple to download the T2 firmware automatically: https://support.apple.com/guide/apple-configurat

• ec109685 6y ago
  Much of the attack vector the author focuses on is pinpointing a user who is restoring their system by their IP address and sending down a poison payload. One way to counteract that is to send this traffic through a Layer 3 proxy. That will obfuscate the true source of the system that is making these reset requests (at least it will mask the IP — not sure if there are other unique identifiers sent along the wire).
  • nieve 6y ago
    If there were no other unique identifiers for a machine how would they be able to create a key that's specific to it? If they can't create a specifc key the entire thing is just for show and it's certainly not with iOS devices.
    • ec109685 6y ago
      Right good point. I meant something that would reveal the environment where the machine was running in versus the serial number or something similar. Basically, my only real point was that at least the IP address can be hidden from Apple.