3 ms·
This is apparently already a thing
by saagarjha 2y ago
This is apparently already a thing
- lxgr 2y agoWhich part? Apple is already using the secure enclave for key derivation, PIN/password rate limiting etc. (that’s what it’s for), but my point is that there’s currently a gap in that you can often not really know if you are actually talking to the secure enclave or OS-level malware.
- saagarjha 2y agoSecure PIN entry
- lxgr 2y agoHow? The secure enclave doesn't have any trusted input/output capabilities other than the power button double click and biometrics. The PIN isn't entered via these.
- hedora 2y agoAlso, can't you just get the pin from the accelerometer? (It may take a few tries, but this was shown by academics a while back.)
- saagarjha 2y agoMy understanding is that sensors are disabled during this
- saagarjha 2y agoThere’s a thing which I know very little about personally but have hearsay of its existence where it rips control from XNU and takes over touch input for this