Paradigm Shift’s usbliter8 exploit targets Apple A12 and A13 SecureROM via USB DFU mode, creating an unpatchable hardware risk.

  • quick_snail@feddit.nl
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    1 hour ago

    This requires physical access. I don’t get it, why is this bad?

    Someone with physical access can already pull out the disk, clone it, and put in a different disk that boots to an identical looking login, but which actually relays the password back to the attacker.

    What more would this exploit allow an attcker with phsycal access that they wouldn’t already have before this exploit?