Re:Apple requires account deletion within apps in AppStore s...
by onion2k on Thursday October 07, 2021 @02:35AM
(#28782952)
AES being broken doesn't mean someone managed to brute force a key. It means someone found a flaw that enables them to break any key in much less time than you'd expect a brute force attack to take. In other words, if AES is broken people would be able to read that ephemeral data quickly enough for it to be useful.
[ Parent
| on HN ]
Re:Apple requires account deletion within apps in AppStore s...
by xg15 on Thursday October 07, 2021 @02:52AM
(#28783053)
I know - and the ephemeral data that attackers were able to capture would of course be at risk.
My point was that data owners have options to limit damage - e.g. immediately stopping any data transmission and not producing any future ephemeral data.