Re:Five States Are Considering Bills to Legalize the 'Right ...
by axoltl on Monday January 23, 2017 @05:24PM
(#13466699)
I'm curious to see how this turns out, especially considering things like TouchID which is paired to the Secure Enclave. Allowing anyone to perform that pairing fundamentally undermines their security model.
[ Parent
| on HN ]
Re:Five States Are Considering Bills to Legalize the 'Right ...
by kevin_thibedeau on Monday January 23, 2017 @07:41PM
(#13467812)
There's no reason for the physical sensor to be combined with the key/credential storage other than to intentionally interfere with third party replacement parts.
Re:Five States Are Considering Bills to Legalize the 'Right ...
by mitchty on Monday January 23, 2017 @10:15PM
(#13468524)
"no reason"?
I can think of one, maybe they pair them at assembly time using a public/private key exchange. If they change, have to change both.
Re:Five States Are Considering Bills to Legalize the 'Right ...
by schoen on Monday January 23, 2017 @08:12PM
(#13467979)
Apple claimed to have a security reason that was in the interest of the user and not only anticompetitive; does someone have a link to an article explaining this? I remember reading about it at the time.
Re:Five States Are Considering Bills to Legalize the 'Right ...
by manicdee on Monday January 23, 2017 @08:29PM
(#13468061)
Here is one article I found, the basic claim is that the Touch ID sensor is (cryptographically?) paired to the secure enclave and replacing it requires Apple magic sauce to revslidste the sensor/enclave pairing.