News for hackers. Stuff that matters.
Re:Five States Are Considering Bills to Legalize the 'Right ... by axoltl on Monday January 23, 2017 @05:24PM (#13466699)
I'm curious to see how this turns out, especially considering things like TouchID which is paired to the Secure Enclave. Allowing anyone to perform that pairing fundamentally undermines their security model.
Re:Five States Are Considering Bills to Legalize the 'Right ... by kevin_thibedeau on Monday January 23, 2017 @07:41PM (#13467812)
There's no reason for the physical sensor to be combined with the key/credential storage other than to intentionally interfere with third party replacement parts.
Re:Five States Are Considering Bills to Legalize the 'Right ... by mitchty on Monday January 23, 2017 @10:15PM (#13468524)
"no reason"?

I can think of one, maybe they pair them at assembly time using a public/private key exchange. If they change, have to change both.

Re:Five States Are Considering Bills to Legalize the 'Right ... by schoen on Monday January 23, 2017 @08:12PM (#13467979)
Apple claimed to have a security reason that was in the interest of the user and not only anticompetitive; does someone have a link to an article explaining this? I remember reading about it at the time.
Re:Five States Are Considering Bills to Legalize the 'Right ... by manicdee on Monday January 23, 2017 @08:29PM (#13468061)
Here is one article I found, the basic claim is that the Touch ID sensor is (cryptographically?) paired to the secure enclave and replacing it requires Apple magic sauce to revslidste the sensor/enclave pairing.

https://9to5mac.com/2016/02/05/error-53-iphone-6/

Re:Five States Are Considering Bills to Legalize the 'Right ... by schoen on Monday January 23, 2017 @08:58PM (#13468212)
Thanks for the reference!