4 ms·
> By your simple reasoning, all iphones would be cracked, yet even the USA govt hasn't been able to crack into them. I don’t think this is quite the right take
by noodlesUK 4y ago
> By your simple reasoning, all iphones would be cracked, yet even the USA govt hasn't been able to crack into them.
I don’t think this is quite the right takeaway. What the threat model is for this is not that you’d be able to crack any iPhone you like in whatever circumstances, but rather more like jail breaking one. Jailbreaks definitely exist, and depending on your need, you’d only need to jailbreak one, once. Even with a per-device token, if what you need is to generate a validly signed photo that has been manipulated (say for a passport photo or forensics), you’d be able to do that.
- ChrisLomont 4y agoThat's not clear. If they designed it well, the photo comes off the sensor into the equivalent of Apple's Secure Enclave, gets signed, then the data reaches the level where jailbreaks could touch it. It would be profoundly stupid (and unlikely) that Sony would send data from the sensor to software, then sign using keys simply read into software. So no, jailbreaks very likely would have zero ability to sign an image.