4 ms·

Is this an undescribed security feature or something else?

• steve_adams_86 5y ago
  It’s inherent to the security model due to cryptographic signing coupling the components. If you were able to swap out security components, you might be able to spoof messages - it would no longer be secure. A stolen phone could be connected to a fake sensor and used to trick the phone into authenticating.
  • nerfhammer 5y ago
    it also must mean the sensor is indelibly attached to the screen now
  • alpaca128 5y ago
    How would it hurt that security model if the phone could sign new components only with the permission of the logged in user? > If you were able to swap out security components, you might be able to spoof messages But Apple repair shops can do exactly that (unless they always replace the device whenever the screen is broken, but I doubt that). What's the purpose in this whole cryptographic integrity if a third party - certified or not - can violate it without leaving a trace? If I was a person who has to worry this much about their security I'd much prefer swapping the screen myself without involvement of people that can't even be honest about "water damage" most of the time.
    • berdon 5y ago
      > unless they always replace the device whenever the screen is broken, but I doubt that Why do you doubt that? I'm sure that's exactly what they do. Edit: Well, by "device" here I read "screen + sensor". If you meant the entire phone then I agree with you heh.