Meta has banned the personal Facebook accounts for everyone on our team

Re:Meta has banned the personal Facebook accounts for everyo... by origin_path on Thursday September 29, 2022 @03:35AM (#33017554)

The way these schemes usually work is that the pairing is done at the factory. Apple switch the iPhone on for the first time as it's being made, it generates a private key that never leaves the secure chip and then presents the public key. The public key is then signed to create a certificate chain and the certs handed back to the device for storage.

So, there's no way to beat it except by extracting a private key, or by using some software exploit to confuse it into signing the wrong thing.

[ Parent | on HN ]

Re:Meta has banned the personal Facebook accounts for everyo... by Nextgrid on Thursday September 29, 2022 @05:22AM (#33018168)

You don't need to extract the private key though, just use it to sign things. So if you have shell access on the phone, you can tell the SE to sign the request you want.

[ Parent | on HN ]

Re:Meta has banned the personal Facebook accounts for everyo... by origin_path on Thursday September 29, 2022 @11:25AM (#33022000)

Only to some extent. Apple work very hard to prevent that from being possible, and it's not necessarily signing just anything the app processor sends. Usually this stuff is integrated with the bootup process.

[ Parent | on HN ]