Live data from Hacker News

Apple’s T2 security chip jailbreak

reportcybercrime.com

21–30 of 393 posts

Re: Apple’s T2 security chip jailbreak

#21
post #16

Earlier quoted context omitted.

Doom on touchbar (2016) https://www.theverge.com/circuitbreaker/2016/11/21/13697058/... https://twitter.com/b3ll/status/800472338496036864?s=20

That's running purely in usermode, and nothing was broken in this demonstration, the touch bar is being used "as intended"

Exactly. This would "in theory" allow Doom to be running outside of the "prescribed parameters".

Re: Apple’s T2 security chip jailbreak

#22

The fact that Apple uses this chip to, among other things, block "unauthorized repair" (can't change a freaking SSD in 2020, really), makes me very happy that people are finding ways to break this chip to make repairs more accessible. On the other hand, this could have serious implications on the iOS security model for example. And I'm pretty sure someone is gonna run Doom on the touchbar in some months.

True, but to be fair, the same mechanism also blocks thieves from using and/or selling stolen Macs.

Fair enough, but the problem is mainly when you are in a third world country and parts are very difficult to get, and where Mac stores are non-existent.

Re: Apple’s T2 security chip jailbreak

#23
post #16

Earlier quoted context omitted.

That's running purely in usermode, and nothing was broken in this demonstration, the touch bar is being used "as intended"

Exactly. This would "in theory" allow Doom to be running outside of the "prescribed parameters".

So the monsters would actually leave the touchbar. This sounds really risky, folks

Re: Apple’s T2 security chip jailbreak

#24

The fact that Apple uses this chip to, among other things, block "unauthorized repair" (can't change a freaking SSD in 2020, really), makes me very happy that people are finding ways to break this chip to make repairs more accessible. On the other hand, this could have serious implications on the iOS security model for example. And I'm pretty sure someone is gonna run Doom on the touchbar in some months.

Doom on touchbar (2016) https://www.theverge.com/circuitbreaker/2016/11/21/13697058/... https://twitter.com/b3ll/status/800472338496036864?s=20

Back in the days, we had bootsector games. In the future we will have TouchBar games running before even the OS boots.

Re: Apple’s T2 security chip jailbreak

#25
post #17
post #8

I wonder if this has security implications. The T2 houses the "secure enclave" and that's where your private keys, certificates and passwords are stored.

The things stored in the enclave are encrypted with a key derived from, among other things, your device password so no jailbreak is going to provide access to them. It would be a big deal if one could, say, run 'offline' dictionary attacks against secure enclave content.

Same password results in a different hash if you run it again.

Re: Apple’s T2 security chip jailbreak

#26

Earlier quoted context omitted.

True, but to be fair, the same mechanism also blocks thieves from using and/or selling stolen Macs.

Fair enough, but the problem is mainly when you are in a third world country and parts are very difficult to get, and where Mac stores are non-existent.

People in third world countries buy Macbooks - really? A decent macbook is several times above an average monthly income in a first-world country already...

Re: Apple’s T2 security chip jailbreak

#27

Earlier quoted context omitted.

Fair enough, but the problem is mainly when you are in a third world country and parts are very difficult to get, and where Mac stores are non-existent.

People in third world countries buy Macbooks - really? A decent macbook is several times above an average monthly income in a first-world country already...

What else are they going to spend our trillions of tax dollars on?

Not much we can do, UN votes are expensive.

Re: Apple’s T2 security chip jailbreak

#28

Earlier quoted context omitted.

Fair enough, but the problem is mainly when you are in a third world country and parts are very difficult to get, and where Mac stores are non-existent.

People in third world countries buy Macbooks - really? A decent macbook is several times above an average monthly income in a first-world country already...

Second hand devices they may, although I'm not sure how many people are shipping Apple products out of the Country given the large scam risk.

Re: Apple’s T2 security chip jailbreak

#29

Earlier quoted context omitted.

Fair enough, but the problem is mainly when you are in a third world country and parts are very difficult to get, and where Mac stores are non-existent.

People in third world countries buy Macbooks - really? A decent macbook is several times above an average monthly income in a first-world country already...

Of course we buy them! The same way in your country there are rich peoples able to afford yachts, we also have an upper class capable of buying all the Apple stuffs.

Re: Apple’s T2 security chip jailbreak

#30

Earlier quoted context omitted.

Fair enough, but the problem is mainly when you are in a third world country and parts are very difficult to get, and where Mac stores are non-existent.

People in third world countries buy Macbooks - really? A decent macbook is several times above an average monthly income in a first-world country already...

I'd guess many in third-world countries buy second-hand Macbooks, as they have a reputation (at least in the past) for lasting a long time?

And are there any first-world countries (except maybe the US^^) where a 13" Macbook is several times the average net monthly income? In Germany, for instance, the monthly average net wage (MANW) is €2500, while the price of a 13" Macbook starts at €1300. Italy: MANW is €1700, Spain: €1800, France: €2400, UK: €2200. Go to the Nordic countries, Switzerland, Ireland, Austria etc. and we're talking MANW of €3000+. Canada has MANW of around US$3400.

^^ If the US is the only first-world country matching your statement, one could argue this is further evidence that the US is no longer a first-world country.

Post reply on HN