News for hackers. Stuff that matters.
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by 1234letshaveatw on Friday January 27, 2023 @09:24AM (#34546340)
Totally bro. Bring on the e-waste, as long as I am good who cares?
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by formerly_proven on Friday January 27, 2023 @09:31AM (#34546423)
iDevices are actually excellent at e-waste reduction precisely because of their "erase everything" feature, which gives owners a very quick and assured way to ensure the devices are actually wiped and reduces incentives to shredding devices or parts of them.
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by hgsgm on Friday January 27, 2023 @09:35AM (#34546471)
The article is about the opposite, and how can you trust that the "erase everything" works? You can't verify it without destroying the device, since the storage is not removable.
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by dijit on Friday January 27, 2023 @09:49AM (#34546636)
The article is saying that people don't unlock their devices before recycling them.

This could be true, but as I mentioned in another comment, as soon as it's removed from the original users iCloud account that lock will be removed.

> how can you trust that the "erase everything" works?

You can't remove it, but as long as nobody else can use the device to recover data then it's fine.

FWIW it's actually pretty easy with SATA SSD's to set a device key, which then encrypts everything on the drive at full speed: https://github.com/Drive-Trust-Alliance/sedutil

The drives are actually already doing this, it's just that the key is set to 0's.

I can imagine that, given the drive is accessed via T2, that Apples NANDS are being accessed the same way, in which case scrambling the key is enough to make it unrecoverable permanently.

Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by formerly_proven on Friday January 27, 2023 @12:06PM (#34548497)
fwiw self-encrypting drives always manage to end up in a research paper every ten years where they show the crypto is catastrophically broken, the key is "md5(serialno)" and the access check turns out to be if(!strcmp(pw,...) || !strcmp(pw, "letmein").
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by danaris on Friday January 27, 2023 @03:36PM (#34551498)
"Some institutions ignore the fact that you can safely resell these devices and just bulk-recycle everything" is not a good counterargument to the GP.
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by philliphaydon on Friday January 27, 2023 @09:28AM (#34546398)
It’s only e waste if stolen or similar. If you are selling it then you can unlock it and there’s no problem.
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by eli on Friday January 27, 2023 @09:32AM (#34546434)
The previous owner CAN unlock if they're able to and they know they're supposed to. Unfortunately I suspect a lot of devices are intentionally donated or recycled while unintentionally locked. I wonder what percentage of SMBs have proper MDM set up for their devices versus just a bunch of personal apple IDs with no way for the org that owns them to unlock them?
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by acdha on Friday January 27, 2023 @09:38AM (#34546502)
This is a self-correcting problem: if I buy a Mac from you on Craigslist I’m not going to say “oops, no big deal” if I can’t use it - I’ll ask you to unlink it, reverse a charge, or even take you to small claims court.

Over time, people learn this and it becomes routine just like people buying used cars know to check that the seller really owns it and isn’t lying about the collision history.

Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by widowlark on Friday January 27, 2023 @01:37PM (#34549880)
how do you reverse a cash payment?
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by acdha on Friday January 27, 2023 @04:05PM (#34551849)
You don’t, which is why many people either avoid them, carefully check before paying (Apple has a detailed “before you buy” guide for this exact reason), or in the worst case that’s why I mentioned small claims court since regrettably some people will misrepresent what they’re selling.
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by philliphaydon on Friday January 27, 2023 @09:37AM (#34546493)
That just means it’s an education problem. Not an apple problem.

On one side everyone wants security and privacy. But when they get it they complain when it prevents them reselling devices that are not theirs.

Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by hgsgm on Friday January 27, 2023 @09:37AM (#34546494)
Apple could help by emailing the owners and asking them if they want to unlock the device or report it stolen. That would remove the ambiguity, help honest recyclers and users and the environment, and generate evidence against thieves.
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by MertsA on Friday January 27, 2023 @10:31AM (#34547108)
You could even go a step further and require the person requesting the unlock to provide photo ID and affirm that they are claiming to be the legitimate owner of the device to dissuade thieves from trying to use it and also for the unwitting receiver of stolen goods you now have a way to get that back to the real owner and potentially track down the thieves on the other side of the transaction. Sadly I doubt that would result in police actually taking action against thieves but a macbook is expensive enough to be felony theft in most places. The guy selling it on Craigslist probably isn't going to use a burner phone, meet away from his home, and use a rental car just to sell a stolen macbook. I think there are much better odds of identifying them if Apple would try and get devices past activation lock and track these cases down.
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by evilduck on Friday January 27, 2023 @09:29AM (#34546409)
It's on the refurb companies to ensure it's unlocked before distributing payment and accepting the product. Otherwise this business is indistinguishable from trafficking stolen property.
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by alphanullmeric on Friday January 27, 2023 @09:33AM (#34546440)
Nah fuck thieves.
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by Brigand on Friday January 27, 2023 @09:27AM (#34546396)
Please.
Re:Apple’s Mac security is so good, it’s sending used M1 Mac... by kaba0 on Friday January 27, 2023 @11:55AM (#34548311)
Apple literally just released a security update to a 10 years old device, and their devices have a huge second-, and even third-hand market so they easily live for that long.

There are plenty things to say about apple, but their devices do serve their lifetimes. I would be much more worried about the litany of low-end laptops and mobile phones that end up in the trash with zero value in a year.