WhatsApp data leak: 500M user records for sale

Re:WhatsApp data leak: 500M user records for sale by worldsavior on Saturday November 26, 2022 @05:29PM (#33757496)

How can you know which CPU is running? Also, the software could easily change the output of the security chip (secure enclave is only on apple devices).

[ Parent | on HN ]

Re:WhatsApp data leak: 500M user records for sale by kibwen on Sunday November 27, 2022 @01:47AM (#33760981)

Part of the attestation process involves receiving a cryptographic signature from the CPU vendor. They can only fake it if they break the cryptography. And enclaves (or "trusted execution environments") aren't only on Apple chips, AMD and Intel have their own implementations.

[ Parent | on HN ]

Re:WhatsApp data leak: 500M user records for sale by worldsavior on Sunday November 27, 2022 @11:54AM (#33764338)

But the CPU is first sending the signature to the OS, thuse enabling the OS to send you something else.

[ Parent | on HN ]