6 ms·
If I'm reading this right, glitching the I2C bus prevents the Secure Enclave from booting. It seems the device recovers from this itself 'Although the device re
by gchadwick 1y ago
If I'm reading this right, glitching the I2C bus prevents the Secure Enclave from booting. It seems the device recovers from this itself 'Although the device recovered and remained operable', maybe the Secure Enclave reboots itself after seeing a fault in the I2C?
No evidence of any security issue is presented. Though it's certainly wanted to drum it as something major 'This is a high-severity, unpatchable design flaw'.
- FluGameAce007 1y agoThe device "recovering" while entering debug mode on production hardware is the security issue. Fuses are supposed to prevent that. They don’t. That’s the flaw.
- re 1y agoIf I own an iPhone 15 Pro, how am I impacted by this? Why does this repo say that a hardware recall may be necessary?
- FluGameAce007 1y agoIf debug logic is still active, attackers with physical access can dump firmware, extract secrets, or bypass protections that should be fused off. Think: stolen phones, shady repair shops, or border checks — cases where physical access + this flaw = real risk. That’s why a hardware recall may be necessary... fuses are meant to be irreversible. If they fail, there's no patch.