PascLeRascon Hacker News • Recommends
On “Ask HN: Best Talks of 2019?”
Behind the scenes of iOS and Mac Security: link to this video Good talk behind the reason for the T2 chip and some other Apple security stuff
0:00 / 0:00
Behind the scenes of iOS and Mac Security
Black Hat
281K subscribers • 47 videos on Hallway • Conference channel
- Recommended by 2 people: 2 on Hacker News.
- Presented by Ivan Krstić
- May be out of date. Uploaded 6 years ago, in an area where tools change fast.
Advanced. Deep dive for people who know the field.
36K views6 years ago2 recommendations
SecurityMobile developmentWeb and application securityCryptographyPrivacy and surveillance
Ivan Krstić explains the cryptographic design of Apple's Find My feature and hardware-enabled secure boot hardening.
The Find My feature in iOS 13 and macOS Catalina enables users to receive help from other nearby Apple devices in finding their lost Macs, while rigorously protecting the privacy of all participants. We will discuss our efficient elliptic curve key diversification system that derives short non-linkable public keys from a user’s keypair, and allows users to find their offline devices without divulging sensitive information to Apple. By Ivan Krstić Full Abstract & Presentation Materials: blackhat.com/us-19/briefings/schedule/#behind-the-scenes-of-…Why it's here
2 people recommend thisWhat people say. Recommended for its detailed look into Apple's secure boot chain and offline location privacy.
paxswillon Hacker News • Recommends
On “Intel x86 Root of Trust: Loss of Trust”
I'm curious if Apple's work on hardening their secure boot process on x86 affects this at all? For this unaware, this 0 video covers it over about seven minutes. Basically they claim to be enabling the IOMMU with a basic deny everything policy so that when the changeover to executing from RAM occurs and PCIe devices are brought up the IOMMU is able to deny possible malicious access to the firmware image. It sounds from the end of the article that there are separate DMA/IOMMU processes for the CSME, but I'm not familiar enough with stuff this far down to know for certain. link to this video
onedognighton Hacker News • Mentions
On “Defeating a Laptop's BIOS Password”
Apple has been moving their defenses earlier and earlier in the boot process. According to this talk0 they are even able to foil malicious option ROM1 and other early boot attacks. I don’t recall if they mention boot passwords specifically, but they claim to lead the industry in this regard. 0 link to this video 1 link
Sirenedon Hacker News • Mentions
On “How Apple overcame its culture of secrecy to create AirPods Pro”
Apple (at least their security org) has done this before with their talks at Blackhat 1 where they've detailed pieces of their boot chain and interesting challenges they solved while building Find My's offline location feature 1: link to this video