News for hackers. Stuff that matters.

A comment on Apple’s T2 security chip jailbreak. Parent comment

Re:Apple’s T2 security chip jailbreak by akvadrako on Wednesday September 30, 2020 @09:21AM (#24638437)
The Secure Enclave on the T2 chip was used to store secrets that were supposed to stay inaccessible, even to someone with physical access.

If you use a strong password to encrypt your drive you should still be safe, unless Apple did something really stupid. The password is used as a one-way hash to generate the key.

However if you can login with Touch ID and they find a way to use known SE exploits, it's compromised. Your fingerprint isn't a secret that gets hashed – instead it's verified by the SE which also holds the secret key for the drive.

[ Parent | on HN ]
Re:Apple’s T2 security chip jailbreak by jonny_eh on Wednesday September 30, 2020 @12:42PM (#24640677)
Isn't a password always required to decrypt on a cold boot?
[ Parent | on HN ]
Re:Apple’s T2 security chip jailbreak by RussianCow on Wednesday September 30, 2020 @12:53PM (#24640823)
Yes, but that doesn't help you if someone steals your MacBook when it's asleep.
[ Parent | on HN ]
Re:Apple’s T2 security chip jailbreak by easton on Wednesday September 30, 2020 @01:54PM (#24641519)
Someone would have to DFU your laptop before hand and jailbreak the chip, since booting into DFU requires shutting the system down.
[ Parent | on HN ]