2 ms·
Much of the attack vector the author focuses on is pinpointing a user who is restoring their system by their IP address and sending down a poison payload. One
by ec109685 6y ago
Much of the attack vector the author focuses on is pinpointing a user who is restoring their system by their IP address and sending down a poison payload.
One way to counteract that is to send this traffic through a Layer 3 proxy. That will obfuscate the true source of the system that is making these reset requests (at least it will mask the IP — not sure if there are other unique identifiers sent along the wire).
- nieve 6y agoIf there were no other unique identifiers for a machine how would they be able to create a key that's specific to it? If they can't create a specifc key the entire thing is just for show and it's certainly not with iOS devices.
- ec109685 6y agoRight good point. I meant something that would reveal the environment where the machine was running in versus the serial number or something similar. Basically, my only real point was that at least the IP address can be hidden from Apple.