61–70 of 267 posts
Is Matthew Green some industry security personality that people respect? I appreciate this write up, it's interesting. But it seems motivated by his little Twitter rant the other day. Who is he beyond some Twitizen in a Guy Fawkes mask who hates HN? I don't particularly like his demeanor, at least from his rather naively uninformed tantrum the other day. Didn't seem very professional or respectable so I just wrote hi…
Earlier quoted context omitted.
FURTHER, unlike Google who would never let you turn this feature off, Apple does, but I have to GO INTO SETTINGS to find it OMG. And what a jokeshow marketing team Apple has because the name is a little confusing.
Somehow those bumbling buffoons over on HN found my tweet and half of them LIKE this feature. WTF! They're even discussing this thread like they like to do.
Earlier quoted context omitted.
You're gonna get yourself rate limited. It's no fun.
You mean "a little bird told you I was going to get rate limited", don't worry I gotchu.
So according to the post iphones now have an AOP (Always on Processor) running a proprietary operating system with access to other phone components. Do we know if other manufacturers also include such a processor? A quick google search showed a relevant apple patent [0] and a similar qualcomm processor product for wearables [1] which suggests to me this (always on processors on consumer electronics) "is out there ...…
Earlier quoted context omitted.
AOP has been a thing since iPhone 6s, so they're not particularly rushed in documenting it.
I can't go too into details, but now that the AOP is doing cryptographical operations and key escrow, the internal bus is likely to show up in future documents. Maybe not the AOP but certainly the mechanisms it uses to interact with the find my network. It may also be a separate find my network whitepaper.
Earlier quoted context omitted.
Do you mean that every Apple device in the world acts as a proxy to forward Bluetooth requests from nearby (off) devices containing their location, automatically? E.g my laptop is pinging data to Apple about random nearby phones all the time that it sees with Bluetooth?
Unless they opt out of it, yes. Which is pretty easy to do, pretty sure it's an option during initial device configuration, but regardless it's in the system settings. Which is pretty easy to navigate. There's even a search option at the top to help you find it instead of navigating to the setting.
Is Matthew Green some industry security personality that people respect? I appreciate this write up, it's interesting. But it seems motivated by his little Twitter rant the other day. Who is he beyond some Twitizen in a Guy Fawkes mask who hates HN? I don't particularly like his demeanor, at least from his rather naively uninformed tantrum the other day. Didn't seem very professional or respectable so I just wrote hi…
https://blog.cryptographyengineering.com/
You seem a little judgemental and obviously unaware.
So according to the post iphones now have an AOP (Always on Processor) running a proprietary operating system with access to other phone components. Do we know if other manufacturers also include such a processor? A quick google search showed a relevant apple patent [0] and a similar qualcomm processor product for wearables [1] which suggests to me this (always on processors on consumer electronics) "is out there ...…
It's not just big application processors that have them, either; some microcontrollers like the ESP32 have them as well.
Earlier quoted context omitted.
I don't disagree but like if you want an open system why are you using an iPhone? Maybe Green is a little guilty of slurping up Apple's privacy marketing?...
You can read more of his iPhone-related writing here: https://blog.cryptographyengineering.com/category/apple/ I'm not sure how concerned he is that it's closed source, I think in this case he was just surprised that the implementation details and security considerations weren't documented anywhere: https://twitter.com/matthew_d_green/status/14433822078386217... Note that he was relatively positive about this feature…
Very interesting read. This seems to be implemented as a Bluetooth LE app running on the ultra-low power “always on processor” used for a variety of features, like “wake-up on motion.” Much like an Tile or AirTag is implemented. No comment on what this is capable in the future.. but for now this shows power usage / signal strength / proximity of other “actually on” devices are a limitations of this feature. What’s im…