Meanwhile in Android-land there isn't even an SEP to handle fingerprint data!!!
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Hacker Releases Firmware Decryption Key for Apple's Secure Enclave
- Thread starter MacRumors
- Start date
- Sort by reaction score
Apropos of nothing, I love this typo.
https://www.imore.com/youre-going-hear-lot-fud-about-apples-secure-enclave-being-hacked-it-wasnt
Your data is still encrypted and safe. Basically the vault was hidden and now it's revealed, but you still can't get into the vault.
Your data is still encrypted and safe. Basically the vault was hidden and now it's revealed, but you still can't get into the vault.
Not the OP, but you may recall that iOS 10
I'm not sure I understand what you meant but assume you're talking about how people on older iOS versions do not get security updates anymore. If you're never connected to the Internet or untrusted networks, I could see how that might be an OK thing to do (if the device itself getting stolen and being vulnerable to in-person attacks doesn't bother you), but I'm guessing that doesn't apply to most people who use iOS devices. For better or for worse, Apple seems to have taken the stance of not releasing any security updates for iOS n-1 starting when or very shortly after iOS n is released, though they have fortunately made rare exceptions like fixing the SSL bug in iOS 6. So, people who like iOS 9 (e.g, the Music app) or aren't ready or able to upgrade for any of various reasons (app incompatibility, old hardware, etc.) are in a difficult situation--but that seems to just be the way it goes with mobile devices. They move a little fast with software on the Mac, but they've always moved swiftly with both hardware and software on the iOS side.
When it comes to updating, either you lose the music app or risk losing your privacy and security.
I think what it means is that since Apple forced iCloud music library and Apple Music into the Music app, they've made it damn near unusable if you don't want to/can't stream, and just want to listen to the music you have synced to your device.
The Music app, ironically the very thing that gave the iPhone all the functionality of an iPod, no longer lets the iPhone function as an iPod used to, which is still the way many people, including me, prefer to listen to the music they already own and have chosen to carry with them.
The new music app was written exclusively to sell music and subscriptions to the millions of customers who don't yet own most of their music, and be damned with the millions of users who already do. The new music app is now nothing more than a giant bandwidth-hogging swill-shilling sellout of an app specced by record-executive puppets and sell-outs...
I think that's what it means.
Why? There's literally nothing to worry about. The headline is far scarier than what is actually wrong.
This in no way means the secure enclave is compromised, it only means that people can decode the software that runs it and have a peek. If you read about the secure enclave even Apple can't tell you what the keys inside are because they're unique to each phone and not stored anywhere.
You have nothing to worry about.
Side note: I highly recommend the app ‘Cesium’ for those saying they’re unhappy with the iOS 10/11 music app. It’s very similar to the iOS 9 version and uses the music apps’ existing songs with it’s own UI. (I’m in no way affiliated with the app / not a dev trying to peddle my crap)
http://www.cesium-app.com/#
Last edited:
I don't know what's so hard - you tap the Library icon, and continue with business as usual. From my perspective, this is a complaint about the unavoidable presence of Apple Music in the interface, "I don't want to use it, so I don't want to see it."
I happen to have Apple Music, but I only use it when connected to wifi. I will not use my cellular data to stream. So, whether it's music downloaded from Apple Music, or music I copied from CD, it's there in Library, as always, when I leave home. No big deal.
--------
And this story underlines the fallacy of "I won't update, it's Apple's greedy conspiracy." There are forces beyond any software/hardware developers control bent on undermining the security of our computing devices - if we choose to place valuable information on them, if our businesses or private lives are dependent upon them, there will be people bent on getting at that valuable information, crippling a competitor, extracting some form of ransom, or just vandalizing for the fun of it.
It's human nature. "Why rob banks? Because that's where they keep the money." If a safe cracker comes up with a new and easy way to break into a particular kind of vault, it's up to the bank to upgrade the vault. And the day may come when the vault can't be upgraded, and a new vault may have to be purchased.
Now, the pace of change in computing software/hardware is much faster than it is in mechanical bank vaults, but that's been the case since the beginning. Wishing this was different cannot make it so.
Last edited:
Given the current environment, where both criminal organizations and nation-state actors collect and hoard security flaws, I'm very happy this release happened. Encryption benefits from having more sets of eyes studying it.
This doesnt solve the problem.
Now, everyone can see everything, with infinite time, they will crack it
I won't argue, but this is a half-truth. There are well-meaning hackers, and malevolent hackers. The gamble is that, by recruiting more good guys, the good guys can keep ahead of the bad guys. This may be true, but it's not an essential truth. The good guys may end up helping the bad guys as well.
My mistake, sorry... I didn't read close enough and only saw the reference to the A7 chip, not "and subsequent A-series chips".
Just in case people aren't aware - you can deactivate Apple Music so that it doesn't appear as an option in the Music app. It's a setting ('Show Apple Music') for the Music app.
This doesnt solve the problem.
Now, everyone can see everything, with infinite time, they will crack it
No they won't, read up on the secure enclave. No one has the same key.
It's not too hard to figure it out...that is IF your an iPhone user...there is a huge difference in layout and design of the music app in iOS 9 vs 10 and soon to be 11...one word...white white and more white...
I understand and know I should update but to be honest I've never heard of one user who got infected with something on there iPhone because they didn't upgrade to the latest iOS.
I understand what you're saying, and you have a valid point of view - but it's different than mine. To at least some degree it's predicated on the assumption that the bad actors don't already have access to this, which of course we won't know.
I generally believe it's better to assume the bad guys already have discovered these sorts of things, simply because the potential financial windfall of finding an exploit means they're willing to throw lots of resources at the problem.
Why not you go live under the rock with Mother Nature? No pollution, no need for civilized culture and get to eat natural foods and all.
He owns the phone and can do whatever he likes with it. Plain and simple. Jailed for hacking into your own phone? C'mon.