News for hackers. Stuff that matters.

A comment on Apple introduces end-to-end encryption for backups. Parent comment

Re:Apple introduces end-to-end encryption for backups by sianemo on Wednesday December 07, 2022 @03:16PM (#33899647)
Do you honestly believe that a malicious actor who can access data storage can also necessarily access a silent mechanism to affect the security internals of a given iPhone? And also the theoretical hacker wouldn't be able to just push said theoretical silent update to your device to just exfil the data anyway?

Really having a hard time understanding the detailed security implications of your scenario beyond this vague notion you're presenting that a theoretical hacker can use theoretical tools to silently pwn any Apple device collected to the internet at any time.

[ Parent | on HN ]
Re:Apple introduces end-to-end encryption for backups by AshamedCaptain on Wednesday December 07, 2022 @03:21PM (#33899711)
> that a malicious actor who can access data storage can also necessarily access a silent mechanism to affect the security internals of a given iPhone?

A malicious actor who can access _already encrypted_ data storage where you cannot even associate files with a given account ID _without_ having already put a backdoor in the corresponding code may be able to actually put such backdoor in the software that is distributed to iPhones? Yes, I believe that.

[ Parent | on HN ]