Question Unpatchable Security Hole in the T2 Chip

[KeithP]

Physical access to the hardware is required but still, yikes…from macintouch.

-KeithP

 

[VirtualLarry]

So much for "Apple Security", LOL.

 

[ch33zw1z]

The fact that it's not patchable is the biggest problem, IMO. I would also assume it's built into the main board, and would require a main board replacement to correct, if and when Apple "patches" the issue. Apple won't do a recalls, but maybe a repair or voluntary replacement for a discount cost (lol ya right) down the road

 

[Commodus]

So much for "Apple Security", LOL.

Belated reply, but: this is really a nothingburger with the physical access requirement. It's like saying that thieves can sign into your computer if they steal it... yeah, you have bigger problems if an intruder is sitting in front of your machine.

 

[KeithP]

Belated reply, but: this is really a nothingburger with the physical access requirement. It's like saying that thieves can sign into your computer if they steal it... yeah, you have bigger problems if an intruder is sitting in front of your machine.

Just because most people have nothing to fear from this exploit doesn't mean it is a "nothingburger". And one of the reasons the T2 chip exists is to help prevent people from gaining access to encrypted storage on a Mac if they get physical access to the machine.

Anyone that cedes physical access of their computer to someone else, voluntarily or by theft, would be in danger. The most obvious example would be people crossing into the United States.

US Customs can seize any device they like and search it when coming into the US. No warrant needed. And the owner won't be present during the search. It is possible other countries can do similar things. If you don't think that is a serious threat, fair enough, but there are a lot of people, such as journalists, that will consider this a huge problem.

-KeithP

 

[ch33zw1z]

Just because most people have nothing to fear from this exploit doesn't mean it is a "nothingburger". And one of the reasons the T2 chip exists is to help prevent people from gaining access to encrypted storage on a Mac if they get physical access to the machine.

Anyone that cedes physical access of their computer to someone else, voluntarily or by theft, would be in danger. The most obvious example would be people crossing into the United States.

US Customs can seize any device they like and search it when coming into the US. No warrant needed. And the owner won't be present during the search. It is possible other countries can do similar things. If you don't think that is a serious threat, fair enough, but there are a lot of people, such as journalists, that will consider this a huge problem.

-KeithP

This is by far the biggest concern here. Law enforcement wants access to phones pretty badly, and now Apple phones have given them the "in". I doubt it was intentional on Apples part, but being unpatchable in the field and the sheer amount of devices affected really stains the apple name IMO