Apple Platform Security (Jan 2026) [pdf]

Post by bri3d » Sat, Jan 31, 2026, 8:47 PM UTC

promiseofbeans wrote: post #78

They made C memory safe? This is a big thing to gloss over in a single paragraph. Does anyone have extra details on this? > On devices with iOS 14 and iPadOS 14 or later, Apple modified the C compiler toolchain used to build the iBoot bootloader to improve its security. The modified toolchain implements code designed to prevent memory- and type-safety issues that are typically encountered in C programs. For example,…

Post by shawnz » Sat, Jan 31, 2026, 8:53 PM UTC

digiown wrote: post #21

runjake wrote: post #14

Earlier quoted context omitted.

This is your blog post, so I'll ask you a question. What are you trying to state in Belief #1? The message is unclear to me with how it's worded: > In this table, in the "iCloud Backup (including device and Messages backup)" row, under "Standard data protection", > the "Encryption" column reads "In transit & on server". Yes, this means that Apple can read all of your messages > out of your iCloud backups. In addition…

Or Apple can also push an update, which you can't refuse, that upon first message to iCloud just uploads your private key. It's a bit foolish to count on encryption implemented by the adversary you're trying to hide from. Of course, this will most likely only affect individuals targeted by state-level actors.

Post by throwaway290 » Sat, Jan 31, 2026, 9:12 PM UTC

derbOac wrote: post #49

wcfrobert wrote: post #28

Apple's commitment to privacy and security is really cool to see. It's also an amazing strategic play that they are uniquely in the position to take advantage of. Google and Meta can't commit to privacy because they need to show you ads, whereas Apple feels more like a hardware company to me.

It's all tempered by them ultimately controlling what you can put on your phone though. As was demonstrated in LA, it's starting to have significant civil rights consequences.

Post by [deleted] » Sat, Jan 31, 2026, 9:27 PM UTC

1over137 wrote: post #94

promiseofbeans wrote: post #78

They made C memory safe? This is a big thing to gloss over in a single paragraph. Does anyone have extra details on this? > On devices with iOS 14 and iPadOS 14 or later, Apple modified the C compiler toolchain used to build the iBoot bootloader to improve its security. The modified toolchain implements code designed to prevent memory- and type-safety issues that are typically encountered in C programs. For example,…

>They made C memory safe? They made a dialect of C with bounds safety, see: https://clang.llvm.org/docs/BoundsSafety.html#overview

Post by [deleted] » Sat, Jan 31, 2026, 9:41 PM UTC

epolanski wrote: post #63

wcfrobert wrote: post #28

Apple's commitment to privacy and security is really cool to see. It's also an amazing strategic play that they are uniquely in the position to take advantage of. Google and Meta can't commit to privacy because they need to show you ads, whereas Apple feels more like a hardware company to me.

I claim bs at this whole apple privacy thing, nothing but propaganda. Two years ago I was locked out of my MacBook pro. Then I just booted in some recovery mode and just..reset the password!? Sure macos logged me off from (most) apps and website, but every single file was there unencrypted! I swear people that keep boasting that whole apple privacy thing have absolutely no clue what they are talking about, nothing sh…