News for hackers. Stuff that matters.
Re:Crouching T2, Hidden Danger by rocqua on Wednesday October 07, 2020 @09:06AM (#24707749)
What I thought from previous articles is that this helps brute forcing passwords. Note that I do not know this for sure.

My thought was that the T2 chip is responsible for rate-limiting access to the Secure Enclave. Specifically, for rate-limiting attempts to derive a key from as user-supplied password and the secret in the Secure Enclave.

This allows for weaker passwords to be used, because brute-forcing requires the secure-enclave in the loop, and access to that enclave is rate-limited. Drop that rate-limiting, and the brute-force attack becomes a lot more viable.

As far as I know, this was at stake when the FBI wanted apple's help a while ago to decrypt an Iphone. However, I have no idea whether this is the same scheme used for MacOS devices. Nor do I know whether the T2 chip is actually responsible for rate-limiting.

Re:Crouching T2, Hidden Danger by philistine on Wednesday October 07, 2020 @10:00AM (#24708267)
I think the rate-limiting is done in hardware by the Secure Enclave itself. It cannot physically respond any faster than it does right now.
Re:Crouching T2, Hidden Danger by 95014_refugee on Wednesday October 07, 2020 @11:20AM (#24709157)
This is correct.