News for hackers. Stuff that matters.

A comment on Apple’s T2 security chip jailbreak. Parent comment

Re:Apple’s T2 security chip jailbreak by saagarjha on Wednesday September 30, 2020 @07:06AM (#24637458)
Apple cannot update this away; the vulnerability goes down to the very lowest levels of the software to the code burned into ROM.
[ Parent | on HN ]
Re:Apple’s T2 security chip jailbreak by selectodude on Wednesday September 30, 2020 @08:11AM (#24637916)
They were able to update it away on the iPhone X. Checkrain doesn’t work on iOS 14 anymore.
[ Parent | on HN ]
Re:Apple’s T2 security chip jailbreak by saagarjha on Wednesday September 30, 2020 @08:26AM (#24638038)
Well, somewhat. They’re doing a clever side channel based on the SEP’s RNG to panic the device when booting from DFU, but this has already been bypassed on older devices via a bug in SEPROM. I believe they already have code execution in the A11’s enclave as well, but that one has some sort of replay protection that complicates matters.
[ Parent | on HN ]