So really Apple probably doesn't want to admit that "rogue signed firmwares" isn't part of their crazy security model... tough luck.
-
@delroth_ the secure enclave's key can't be exposed by firmware; there's no wire it could go over
@FioraAeterna Hardware keys are useless against rogue firmware. Rogue firmware can turn secure hardware into a free-for-all oracle.
-
-
@marcan42 the secure enclave doesn't even take firmware updates afaik... -
@FioraAeterna Of course it does. Apple signs the secure enclave firmware. How would they fix bugs otherwise? https://www.apple.com/business/docs/iOS_Security_Guide.pdf … p5 - Show replies
New conversation -
-
-
@marcan42@FioraAeterna Just make the update protocol clear the kwys first. (I don't know if they do this.)Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.