5 ms·
Intel's spyware is one big reason I look forward to switching to Apple Silicon soon.
by stalfosknight 4y ago
Intel's spyware is one big reason I look forward to switching to Apple Silicon soon.
- jeffbee 4y agoYou believe there are not non-architectural cores in Macs?
- stalfosknight 4y agoDo you have evidence otherwise?
- jeffbee 4y agoYeah, I do. Every system has tons of non-architectural cores for security, power management, and for other purposes. Apple advertises some of theirs as for example "secure enclave" and, on older Macs, the T1 and T2 security processor which runs the proprietary closed-source BridgeOS and has unfettered access to everything on the system.
- stalfosknight 4y agoWhich one of these cores perform the same functions and present the same attack surface as the IME?
- tzmudzin 4y agoClosed source, so we can speculate (or try to reverse engineer/break it).
- stalfosknight 4y agoSo at best we have cynicism / paranoia regarding Apple's T2.
- jeffbee 4y agoThat's all anyone has against IME, also. And BridgeOS isn't any more secure. There are tons of known flaws in it.
- stalfosknight 4y agoPart of it runs bridgeOS. The Secure Enclave runs something else altogether called sepOS. https://support.apple.com/guide/security/secure-enclave-sec59b0b31ff/web https://support.apple.com/guide/security/secure-enclave-sec5...
- anonym29 4y agoBy a 'zero trust' security philosophy, anything short of completely open source is inherently untrustable. You may not be practicing that philosophy, but that doesn't make those who do "paranoid" any more than corporations implementing PCI-DSS controls. Security does not work retroactively, only proactively.
- 8jy89hui 4y agoCouldn't the T2 chip (or other Apple security chips) do similar things?
- mmis1000 4y agoIsn't T2 there because apple didn't trust intel me at all? There is no one trust about this sh*t except intel themselves. The only difference is apple have the power to ask intel get rid of it but we don't.
- EMM_386 4y ago> There is no one trust about this sh*t except intel themselves. AMD has this also, they appeared around the same time, and there is no reason to believe (if) this was outside of their control (i.e. mandated) that Apple isn't also playing ball here.
- tzmudzin 4y agoI am not an expert in Apple hardware / firmware, but I admire your trust that the US government could not exert the same influence on Apple as they did on Intel. Intel probably had to disclose the existence of IME due to collaboration with mainboard vendors. Apple does not face this constraint, so it is a lot easier for them to keep such subsystems under wraps. Of course I'm just speculating here, but a product typically mirrors its environment.
- samatman 4y agoThe IME was never a secret. Anyone can decap an Intel chip and point to it. I find it implausible that the A/M series chips have an independent subsystem that is so obfuscated that the expert attention which each Apple die receives has turned up no trace of it. The company has its own approach to secure compute with the T2 modules, but no, I don't believe Apple would be able to hide something like IME on their CPUs without it being detected as such.
- fragmede 4y agoWhich is to say, it's hiding in plain sight. The secure enclave and T2 modules can do things to the processor. Who's to say "things" doesn't include ME-like capabilities?
- wmf 4y agoThe people who reverse-engineered the secure enclave firmware can say that.
- samatman 4y agoIt might be useful to go over Wikipedia's entry for both platforms, here's the IME: https://en.wikipedia.org/wiki/Intel_Management_Engine https://en.wikipedia.org/wiki/Intel_Management_Engine And this for the T2: https://en.wikipedia.org/wiki/Apple_T2 https://en.wikipedia.org/wiki/Apple_T2 Neither of these are obscure products, they are of great interest to reversers and other security researchers. The list of shady things IME does which the T2 isn't known to is extensive.
- NoImmatureAdHom 4y agoTrusting Apple...doesn't make a lot of sense. They're almost entirely security-by-obscurity. You have nothing to go on but their promises.
- fragmede 4y agoApple doesn't tell us everything, but they do say a lot so I don't think I'd call it security by obscurity. https://support.apple.com/guide/security/secure-enclave-sec59b0b31ff/web https://support.apple.com/guide/security/secure-enclave-sec5... https://help.apple.com/pdf/security/en_US/apple-platform-security-guide.pdf https://help.apple.com/pdf/security/en_US/apple-platform-sec... They give us the architecture diagrams and tell us how the locks on their doors work, but they don't gives us the keys for it. Remember: You don't actually own any iOS device because you can't run unsigned code that you wrote on it.
- NoImmatureAdHom 4y agoIf the builds aren't verifiable and you can't put what you want on there then it's just promises, which are worth nothing. > Remember: You don't actually own any iOS device because you can't run unsigned code that you wrote on it. We agree about that!
- stalfosknight 4y agoI'm with you on the general idea that we shouldn't blindly believe everything a for-profit corporation says but at the same time we shouldn't allow fact-free speculation, rumor, or just plain cynicism to masquerade as facts either.
- NoImmatureAdHom 4y agoI don't think it's controversial that trust in Apple's extremely locked-down ecosystem basically comes down to "we promise". If it's closed source you can't verify. Even if it's open, if it's not a reproducible build (or your own build) that you install yourself then who knows what's on there and what it does?
- melvyn2 4y agoOh, the irony... Remember the hardwired 'Find My' geolocation function built into the permanently-on T2 chip?