4 ms·

>provide official tools/software to bind them to the replacement device. This is never going to happen as long as touchid/faceid exist.

• Nextgrid 5y ago
  Why not? There's no technical reason why the touch or face sensor needs to be trusted. The actual security processing happens in the secure element. The sensor is just an input device.
  • mirashii 5y ago
    That doesn't prevent a malicious FaceID chip from recording and replaying sensor output, allowing a backdoor to unlock the phone, or a variety of other attacks. There's a security guide that talks more about what the threat model is and where exactly the encryption and trusted communications happen. https://support.apple.com/guide/security/touch-id-and-face-id-security-sec067eb0c9e/1/web/1 https://support.apple.com/guide/security/touch-id-and-face-i...
    • tata71 5y ago
      Threat models: what are they, how do they work?
    • smoldesu 5y ago
      If someone has physical access to your iPhone, it's game over. The US government holds your decryption keys, and there are third-parties that sell exploit kits that are a lot cheaper than spoofing some encrypted I2C interface (see: Greykey).
    • dghlsakjg 5y ago
      If someone has access to the inside of your phone, where they can micro-solder a custom chip in, they are capable enough that face-id was never going to slow them down. If you believe that you are the target of such a threat actor, you probably aren't keeping much on your phone. I would assume that if you are under that kind of threat, you don't keep secrets on a device that isn't airgapped.