3 ms·
Compromised private keys is not uncommon, and in this case it is even more dangerous because you would normally trust that an iPhone in a shrink-wrapped box bou
by selcuka 3y ago
Compromised private keys is not uncommon, and in this case it is even more dangerous because you would normally trust that an iPhone in a shrink-wrapped box bought from an Apple store comes directly from the factory.
- userinanother 3y agoBrilliant way to pre compromise a phone. The victim will never suspect a sealed box
- AlotOfReading 3y agoWhen was the last time a large vendor had an HSM compromised directly? Malicious code signed, sure, but I've never heard of keys being leaked from an internal HSM that the attackers didn't have high levels of access to. It seems to me the threat model for consumers is the same either way. The box itself doesn't offer any meaningful tamper-evidence, so a sophisticated attacker would just re-shrinkwrap everything if they couldn't update them this way.
- sweetjuly 3y agoYou know you can also just buy shrinkwrap and heat it with a hairdryer, right? If the people you're up against can steal signing keys, surely they can spend $20 to buy some plastic.
- selcuka 3y agoSure, but this allows doing this inconspicuously, probably by an Apple store employee.
- LocalH 3y agoPretty sure if someone publicly compromised TSS to that degree, people in the jailbreaking scene would be bouncing off the walls.