10 ms·
I keep thinking that the right solution to this problem is to add an HSM that functions as a bearer title for the device, layered above the existing Apple root
by RulerOf 3y ago
I keep thinking that the right solution to this problem is to add an HSM that functions as a bearer title for the device, layered above the existing Apple root of trust, that comes in the box.
It could sign an activation lock removal and give it to the device through the usb port.
If the HSM is lost or fails, revert to the status quo.
- kristjansson 3y agoThat is a cool idea. The machine comes with a horcrux :)
- RulerOf 3y agoI like the idea of course, but I can see it so easily ending up in some forgotten corner of a stolen laptop bag. The common theme that keeps coming up with activation lock that Apple's customers do not understand this feature until it bites them in the wallet. Any solution would require education that these same people won't get until they're in an irrevocable situation anyway.