Secure Enclaves Anyone? T2 chip has unfixable vulnerabilities

[Curufinwe_wins]

 

Summary

 Another enclave beats the dust 

 

Quotes

Quote

 "I had already assumed that since T2 was vulnerable to Checkm8, it was toast," says Patrick Wardle, an Apple security researcher at the enterprise management firm Jamf and a former NSA researcher. "There really isn't much that Apple can do to fix it. It's not the end of the world, but this chip, which was supposed to provide all this extra security, is now pretty much moot."

 

My thoughts

 Those who know or remember about previous discussions with Microsoft and Intel, know that I brought up this exact issue (as have many other arm chair and actual professional infosec folks). T2 makes almost everything else secure, if and only if it itself is fault-proof (an impossibility in real world terms) and the design means that faults within the chip are unpatchable. 

 

Sources

 https://arstechnica.com/information-technology/2020/10/apples-t2-security-chip-has-an-unfixable-flaw/

[Suika]

I guess there's no longer a point to making their devices irreparable and Apple is just blatantly spewing electronic waste at this point. At least they'll eventually be carbon neutral, when you overlook the landfills and costly recycling plants.

[Mark Kaine]

So did anyone actually think that would work...

 

Doubtful.

 

Just another "feature" to milk customers.

 

Also why do these companies not test this themselves? Oh I guess paying a few "white hat" hackers literally peanuts is cheaper, disregard the question.

[S w a t s o n]

Repost

[Random_Person1234]

I think there’s already another post with this

[Bombastinator]

58 minutes ago, S w a t s o n said:

Repost

And repost of something that was debunked no less.

[Curufinwe_wins]

1 hour ago, Bombastinator said:

And repost of something that was debunked no less.

Afaik, this is actually about the tool being released. It quite clearly has been compromised (visible proof having been shown in the last 6 months). I wrote the note quickly, so it wasn't completely perfect in summarizing the article. Now good news is it isn't a persistent hack, so that's generally nice, but the chip doesn't actually reboot every time the device does, so it's more complicated than just saying power cycle to remove the code exploit.