News for hackers. Stuff that matters.

A comment on Evidence points to another leaker at the NSA. Parent comment

Re:Evidence points to another leaker at the NSA by tw04 on Monday August 22, 2016 @08:28PM (#12340435)
>iOS already, today, for no other reason than to prevent downgrades, verifies every firmware upgrade/restore with an Apple server, which sends back a per-device signature.

Are we pretending now that the government couldn't MITM and fake the response? I think they've proven they can MITM pretty much ANYTHING their hearts desire.

[ Parent | on HN ]
Re:Evidence points to another leaker at the NSA by comex on Monday August 22, 2016 @09:09PM (#12340603)
> Are we pretending now that the government couldn't MITM and fake the response? I think they've proven they can MITM pretty much ANYTHING their hearts desire.

Only if they have Apple's private keys or can break RSA...

[ Parent | on HN ]
Re:Evidence points to another leaker at the NSA by tw04 on Monday August 22, 2016 @10:08PM (#12340885)
I hope the ... was because you're aware they already broke RSA.

http://www.theverge.com/2013/12/20/5231006/nsa-paid-10-milli...

[ Parent | on HN ]
Re:Evidence points to another leaker at the NSA by comex on Tuesday August 23, 2016 @12:45PM (#12345119)
Wrong RSA. I'm referring to the algorithm, not the company.
[ Parent | on HN ]
Re:Evidence points to another leaker at the NSA by zbyte64 on Monday August 22, 2016 @08:57PM (#12340563)
They literally have the tools to do just that.
[ Parent | on HN ]
Re:Evidence points to another leaker at the NSA by willstrafach on Monday August 22, 2016 @10:59PM (#12341069)
No they do not. The device will not install a firmware if the restore is not signed by Apple's private key.
[ Parent | on HN ]