It doesn't align at all.
The only way it could truly be local only is if the device had to be disassembled and leads attached to the board. Otherwise it's remote exploitable.
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apple Silicon Security Flaw Discovered in iPhone 12 and M2 MacBook Air
- Thread starter MacRumors
- Start date
- Sort by reaction score
It doesn't align at all.
The only way it could truly be local only is if the device had to be disassembled and leads attached to the board. Otherwise it's remote exploitable.
It seems you are mixing apples with oranges here. Some features require the newer processors to work properly. Nothing to fix here, it's expected if the device is not capable of the new feature.
In other cases, older devices benefit from new features added to the OS in later versions.
$50 off, not 50% off! No big deal...
This has been said about AAPL for the past 30+ years. I guess that's one long fuse.
No one, in the history of Apple, has ever been "forced" to upgrade...
My ex used an iPhone 2G (by choice) until the 6S came out. Hell, I still I see people carrying around the 5 and 5S occasionally. I keep Macs well past their software support phase. You think anyone, anywhere, other than businesses and this site cares anything about any of this?
Forced, indeed. Yawn.
Last edited by a moderator:
I understand there's a theoretical risk, but can someone explain exactly what I need to be careful of here? Is it that someone with physical access to my machine could potentially see my interactions with a local instance of ChatGPT? If that's the case, I'm not losing any sleep over it.
This makes no sense. There's far more money to be made by working to keep the company going than by burning it down.
Anxiously waiting for the predictable chorus of naysayers to jump in to explain why this is yet another nail in the coffin for the AVP.
So giving an unlocked Apple device to a stranger is bad
Although I upgrade my iPhone every year, not my Mac or iPad device. Anyhow, Apple also promotes how long lasting its' hardware and OS support, yet when it comes to security issue the previous generations of hardware or OS may not receive the needed patch at the same timeline.
Having looked over the source article, I could not find anywhere that states physical access is required.
I did find the section that states remote execution (from a website) is not possible simply because websites cannot execute the low level code required to exploit the vulnerability. However, that same section also stated that malicious apps installed on the affected devices can exploit the vulnerability.
Did I miss something in that original article?
Also, FWIW, this affects a lot more than just older Apple GPUs. Also affects AMD, Qualcomm, etc. Intel, Arm, and nVidia are not affected.
I did find the section that states remote execution (from a website) is not possible simply because websites cannot execute the low level code required to exploit the vulnerability. However, that same section also stated that malicious apps installed on the affected devices can exploit the vulnerability.
Did I miss something in that original article?
Also, FWIW, this affects a lot more than just older Apple GPUs. Also affects AMD, Qualcomm, etc. Intel, Arm, and nVidia are not affected.
I wouldn't be surprised that Apple will try to patch it with iOS 17.3, which is now in final testing stage. Apple has yet to release a Release Candidate version of iOS 17.3, so the patch could be incorporated as part of iOS 17.3 RC by January 18, 2024.
How, except guessing the password? Isn't the filesystem encrypted by default on Apple Silicon?
Well I downloaded and the compiled the PoC on my M1 Mac and it doesn't seem work as the GitHub suggests it if has the LeftoverLocals vulnerability
Attachments
This isn't a real problem for anyone in real life. With local access to the machine they can watch your whole session, so grabbing extraneous LLM data is pretty pointless.
Get real, institutional investors and the board love Tim Cook; he made Apple a trillion dollar company under his watch. He'll leave when he decides, and the board will beg him to stay before he goes.
Last edited by a moderator:
If it were so difficult to get physical and elevated access, iOS 17.3 wouldn’t include Stolen Device Protection.
Many people unknowingly provide elevated and physical access.
Are you expecting 100% perfection all the time with every release? Keep dreaming... technology is hard! Often, issues are not discovered until after they are in use by millions of people. You can relax. It's par for the course. Nobody is going to steal your data with this "flaw".
Leave your friend alone. The only people updating because of this flaw are suckers.
People who are shocked that Apple has a vulnerability in silicon... Intel wants a word. Silicon vulnerabilities are a reality of modern computing just as software vulnerabilities are, with the exception that most require physical access.
🤔
50 percent ≠ 50 dollars
Amazon Has Nearly Every Apple Watch Ultra 2 Model for $749 ($50 Off)
Amazon has nearly every model of the Apple Watch Ultra 2 for $749.00 today, down from $799.00. You'll find all band options on sale at...
www.macrumors.com
Provide the Amazon link that sends us to the Apple Watch Ultra 2 selling New for $400?????