5 ms·
This has nothing to do with security. Real life security works like this: you leave your device unattended for an hour or two - it can get compromised. Period.
by aenis 5y ago
This has nothing to do with security. Real life security works like this: you leave your device unattended for an hour or two - it can get compromised. Period. If you are serious about opsec - just take this into account.
My personal devices were hacked in Russia a few years ago. 2 hours out of the hotel room to have dinner. They broke through - what I thought was - decent security of a linux os used properly. I only learned since the device had a 3g modem that would send a ping to my phone on every login. Since then, I assume any hardware is easily compromisable and dont mind the security theather vendors rely on to get sales.
- deadmutex 5y agoWhat do you think made you a target?
- MerelyMortal 5y agoFrom his other comments, three possibilities: > I run a service with approx. 900k daily users > I work for one of those staffing companies > my purely anecdotal experiences of attending/organizing a few 500-person-plus hackstons
- aenis 5y agoThat was before. Imho that was just wholesale hacking, not specifically targetted at me - but at the "type of person" I was. I then was a nobody working for a very large US company as an it architect. Stayed at an expensive hotel in Moscow, one of those few that visiting business used to frequent. That was it.
- dpkonofa 5y agoYou're literally responding to an article that shows that the situation you're describing would be impossible with this device. How does this have nothing to do with security?
- smoldesu 5y ago> The most sophisticated repair shops have found a workaround, but it’s not a quick, clever hack—it’s physically moving a soldered chip from the original screen onto the replacement. Sounds like that's not a problem for sophisticated adversaries, such as, say, the United States Government.
- kemayo 5y agoBut presumably the attack wouldn't be replacing the screen -- which is what this workaround allows -- it'd be replacing the chip with one that you've compromised, because then you could have it let you bypass security. Not to say that they won't find a way to get around that, just that the existing workaround doesn't create a security issue.
- dpkonofa 5y agoPhysically moving the soldered chip from the original to the replacement doesn't disable FaceID, though. It just allows you to continue using FaceID. That means you still need the person whose phone it is to unlock it or the passcode used to bypass FaceID.
- hda2 5y agoIf it isn't capable of preventing screen replacements, what security benefits did Apple apple want to achieve with this misfeature? Securing analogue components via serialization is mostly a pipe-dream and apple knows it. This is just another power grab disguised as a security feature.
- dpkonofa 5y agoIt’s not meant to prevent screen replacements, that’s the whole point. It’s meant to verify the chain of trust of the hardware involved in the security function of the device. If you move that from one device to another, you haven’t broken the chain.
- rasz 5y ago
- GeekyBear 5y ago>This has nothing to do with security. You can argue that the biometric sensor shouldn't be integrated into the screen, but you can't argue that the biometric sensor that is integrated into the screen has nothing to do with security.
- deleted 5y ago[deleted]