News for hackers. Stuff that matters.
Re:New iMac with M4 by stephenr on Monday October 28, 2024 @03:22PM (#41975024)
Are you sure about the keyboard? Mine disconnects from BT when it's plugged in (and continues to work)
Re:New iMac with M4 by notinmykernel on Monday October 28, 2024 @05:14PM (#41976374)
You still have to switch it "on" which means it is emitting a BT signal. It leaves users vulnerable to keylogging via BT. It's well-attested and was reported to Apple in Q4 2022.

Ideally the on/off switch would not control both the power and BT.

Re:New iMac with M4 by wtallis on Monday October 28, 2024 @05:36PM (#41976615)
It still transmits keystrokes over Bluetooth even when it's connected over USB?
Re:New iMac with M4 by notinmykernel on Tuesday October 29, 2024 @02:16PM (#41987669)
Yes. It is possible intercept keystrokes for an Apple keyboard that has been previously connected to a computer or laptop. It was tested as part of this vulnerability for Apple shortcuts: https://jestlandia.github.io/apple-shortcuts-vulnerability-1....
Re:New iMac with M4 by wtallis on Tuesday October 29, 2024 @05:47PM (#41989742)
Do you have a link that actually corroborates and explains this?
Re:New iMac with M4 by notinmykernel on Tuesday October 29, 2024 @08:01PM (#41990716)
I can make one, yes. We thought it was irresponsible to release it at the time. But hey, times change. Will update shortly.