5 ms·

> Apple makes it clear in big bold letters that you're compromising security by using alternative booting technology. Can you give an example(s) of how you are

by gist 6y ago

> Apple makes it clear in big bold letters that you're compromising security by using alternative booting technology. Can you give an example(s) of how you are compromising security? If I make my own boot drive and boot from it how am I compromising security? I can think of scenarios like the following but the way I see it this would be a corner case: "I somehow social engineer making a clone of a person's (say my wife/coworker (not computer literate)) hard/ssd drive. I then figure out a way to make their machine only boot from that drive by simply choosing that as the startup disk. I have installed some malware on that external drive that grabs or does something nefarious". In that case though with that kind of access I could have done similar on their internal drive since I have access to it already." My point is why do we assume that the external boot drive is compromised if it is being created by the person who owns the hardware? This seems like some kind of government or large company protection applied to the entire apple customer base. Why couldn't the device ship with the ability to turn off this protection?

sys_64738 6y ago
HW RoT prevents you from being able to replace OS binaries with compromised versions. How are you going to prove your external boot drive isn't compromised without HW RoT? HW RoT reduces the attack surface available and gives a more secure baseline but sure it can be compromised. But an external drive is the Wild West. This is the reason black sites don't allow support people to bring their own tools onsite as you have to assume they're compromised.
- dingaling 6y ago
  But assuming that the internal disk data is encrypted and unavailable to the external OS, what does it matter if it has modified kernel modules? The worst it can do is scribble garbage over the cipertext, which is unfortunate but not a security risk.

by gist 6y ago

sys_64738 6y ago

HW RoT prevents you from being able to replace OS binaries with compromised versions. How are you going to prove your external boot drive isn't compromised without HW RoT? HW RoT reduces the attack surface available and gives a more secure baseline but sure it can be compromised. But an external drive is the Wild West. This is the reason black sites don't allow support people to bring their own tools onsite as you have to assume they're compromised.

dingaling 6y ago
But assuming that the internal disk data is encrypted and unavailable to the external OS, what does it matter if it has modified kernel modules? The worst it can do is scribble garbage over the cipertext, which is unfortunate but not a security risk.