25 ms·
I'm confused. Normally one cannot "pair" a device without entering the passcode to unlock it. Is this not the case?
by benguild 12y ago
I'm confused. Normally one cannot "pair" a device without entering the passcode to unlock it.
Is this not the case?
- deleted 12y ago[deleted]
- deleted 12y ago[deleted]
- kevinchen 12y agoYes, but one issue is that you could be pressured into pairing the device. Or someone can brute force the passcode to access the pairing UI. The slides mention a way to bypass pairing, but I don't think ever mentioned how.
- makomk 12y agoApple can boot the device over USB using a custom image that doesn't require the passcode. Other people can't because it needs to be signed with Apple's key in order to run.
- benguild 12y agoGot it. But if you say "don't allow pairing" they're SOL from a software perspective? I find that hard to believe... but either way, who knows really.
- dunham 12y agoYes, the device needs to be unlocked to pair it, otherwise it doesn't access to the keys needed to create the pairing record. The pairing record (stored on your desktop) helps avoid needing to unlock the device for subsequent access. I believe the device still needs an AfterFirstUnlock key to decrypt the escrow keys, so a cold-booted device wouldn't be accessible even if it was paired.