3 ms·
Not to knock on this too hard because it seems cool and useful for 98% of people out there but touch id does have an unfixable vulnerability. If you are securit
by r0m4n0 4y ago
Not to knock on this too hard because it seems cool and useful for 98% of people out there but touch id does have an unfixable vulnerability. If you are security obsessive, maybe no touchid altogether on your mac (I use a token).
https://arstechnica.com/information-technology/2020/10/apples-t2-security-chip-has-an-unfixable-flaw/ https://arstechnica.com/information-technology/2020/10/apple...
- jolux 4y agoWhat about on apple silicon macs?
- olliej 4y agoSeems like not (but I was just doing lightweight googling out of the same curiosity), the last exploitable generation of AS was iPhone X, which I _think_ predates the AS macs. Also as far as I understand exploitation would require physical access to the target device.
- muricula 4y agoI'm fairly sure that checkm8 doesn't affect apple silicon macs.
- olliej 4y agoHappily the exploit doesn’t exist in any of the arm macs. That said the checkm8 exploit requires (as far as I’m aware) physical access to the target device, which is a fairly constrained attack vector for any real world attack. Obviously if you are at risk of such attacks though then your risk profile is _vastly_ different and the steps you need to take are also different.
- DavideNL 4y agotldr; "But the T2 also contains a vulnerability, known as Checkm8, that jailbreakers have already been exploiting in Apple's A5 through A11 (2011 to 2017) mobile chipsets. Now Checkra1n, the same group that developed the tool for iOS, has released support for T2 bypass." "Computers that have the Apple T2 Security Chip": https://support.apple.com/en-us/HT208862 https://support.apple.com/en-us/HT208862