2024

Apple

Green

when

Security

<p class="p1">A newly uncovered vulnerability in Apple’s M1, M2, and M3 series chips, which are the brains behind their latest devices, could expose users to potential crypto theft. This flaw allows for the manipulation of the CPU to steal cryptographic keys, crucial for safeguarding data privacy, including those used in software crypto wallets on Apple devices.</p>
<p class="p1">If you own an Apple device manufactured in the past five years, you might be at risk, as this vulnerability doesn’t leave much room for users to defend themselves against potential attacks. The primary victims of such an exploit are likely to be high-value targets, such as individuals possessing <a href="https://insidebitcoins.com/buy-cryptocurrency/best-crypto-exchanges" rel="noopener noreferrer nofollow">cryptocurrency wallets</a> with substantial funds, according to Matthew Green, a cryptography expert and computer science professor at Johns Hopkins University. While the attack might not be practical for everyday use, it poses a significant threat to web browser encryption, impacting browser-based applications like MetaMask, iCloud backups, or email accounts.</p>
<h2 id="understanding-the-gofetch-exploit-what-it-means-for-you">Understanding the “GoFetch” Exploit: What It Means for You</h2>
<p class="p1">The exploit, named “<a href="https://gofetch.fail/" rel="noopener noreferrer nofollow">GoFetch</a>,” was detailed in a report by researchers from prestigious institutions, including the University of Illinois Urbana-Champaign and the University of Washington. The attack leverages Data Memory-Dependent Prefetchers (DMPs) in the chips to access the CPU cache. By observing the side effects of secret-dependent accesses to the processor cache, attackers can infer a victim program’s secrets, even when the attacker and victim don’t share memory.</p>
<p class="p1">This disclosure is distinct from the “Augury” pre-fetchers exploit revealed in 2022 but operates on a similar principle. The research team notified Apple of their findings on December 5, 2023, and made their research public after more than 100 days had passed.</p>
<h2 id="apple-s-response-and-how-to-protect-your-data">Apple’s Response and How to Protect Your Data</h2>
<p class="p1"><a href="https://www.apple.com/" rel="noopener noreferrer nofollow">Apple</a> has acknowledged the efforts of the researchers and pointed to a developer post that outlines a potential mitigation strategy. This workaround, however, may slow down application performance as it involves assuming “worst-case” processing speeds to avoid invoking the cache. The onus is on MacOS software developers to implement these changes, not the users.</p>
<p class="p1">Despite Apple’s response, some experts believe it falls short. Journalist Kim Zetter noted that Apple added a fix for this issue in its M3 chips released in October but failed to inform developers in time for them to enable it. It’s now up to wallet makers like MetaMask and Phantom to implement a patch to protect against the exploit. Until then, the safest course of action for crypto wallet users on vulnerable <a href="https://www.apple.com/store" rel="noopener noreferrer nofollow">Apple devices</a> is to remove the wallet from the device.</p>
<p class="p1">Apple users have historically felt secure from malware attacks due to the design of MacOS and iOS devices. However, a separate report by cybersecurity firm Kaspersky in January highlighted the emergence of malware targeting both Intel and Apple Silicon devices with “unusual creativity.” Specifically, the malware targeted Exodus wallet users, tricking them into downloading a fake, malicious version of the software.</p>
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 <p lang="en" dir="ltr">Newly discovered vuln in Apple M-series chips lets attackers extract secret keys from Macs. "The flaw—a side channel allowing end-to-end key extractions when Apple chips run…widely used cryptographic protocols—can’t be patched" <a href="https://t.co/yjQTogcIzk" rel="noopener noreferrer nofollow">https://t.co/yjQTogcIzk</a></p>
 <p>— Kim Zetter (@KimZetter) <a href="https://twitter.com/KimZetter/status/1770869722760061195?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">March 21, 2024</a></p>
</blockquote>
<p><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></p>
<p class="p1">In summary, while Apple devices are generally regarded as secure, this newfound vulnerability in the cryptographic key management of their latest chips serves as a reminder that no system is entirely immune to threats. Users, especially those with significant <a href="https://insidebitcoins.com/buy-cryptocurrency/best-crypto-presales" rel="noopener noreferrer nofollow">cryptocurrency holdings</a>, should remain vigilant and keep abreast of any developments or patches to safeguard their digital assets.</p>
<h3 class="p1" id="exploring-cloudbet-a-leading-destination-for-aviator-gaming-and-more">Exploring Cloudbet: A Leading Destination for Aviator Gaming and More</h3>
<p class="p1">Cloudbet stands as a premier Aviator <a href="https://insidebitcoins.com/bitcoin-casinos" rel="noopener noreferrer nofollow">casino</a>, renowned for its extensive selection of online games and e-sports betting since its 2013 launch. With over 100,000 users, its standout feature is the commitment to security, storing customer funds in cold storage. The platform’s user-friendly interface and diverse game collection, including slots, table games, and virtual games, cater to various preferences. Players can use multiple currencies or opt for ‘free play’ to explore games risk-free. Cloudbet also supports cryptocurrency deposits with specific minimum requirements, such as 0.01 ETH.</p>
<p class="p1">New users are greeted with a 100% deposit bonus up to 5 BTC, alongside ongoing promotions like loyalty rewards, free spins, and a $100,000 giveaway linked to popular Evolution games. This array of offerings ensures a thrilling gaming experience on Cloudbet.</p>
<p>You can <a href="https://insidebitcoins.com/visit/cloudbet" rel="noopener noreferrer nofollow">sign up for Cloudbet casino here</a> to claim your bonus, or read on to learn more about Cloudbet first.</p>
<h3 id="related-news">Related News</h3>
<ul>
 <li><a href="https://insidebitcoins.com/news/thunder-terminal-loses-192000-in-hacking-attack" rel="noopener noreferrer nofollow">Thunder Terminal Loses $192,000 In Hacking Attack</a></li>
 <li><a href="https://insidebitcoins.com/bitcoin-wallets" rel="noopener noreferrer nofollow">10 Best Bitcoin Wallets for Beginners – Store Crypto Safely</a></li>
 <li><a href="https://insidebitcoins.com/buy-cryptocurrency/best-crypto-wallets" rel="noopener noreferrer nofollow">Best Crypto Wallets For Beginners In 2024 – Top 8 List</a></li>
</ul>
<div class="inContentProviderSingle inContentColor--insidebitcoins fc-row">
 <div class="inContentProviderSingle--wrapper">
  <div class="container">
   <div class="row mb-lg-3">
    <div class="col-12 col-md-8">
     <p class="inContentProviderSingle--title">Green Bitcoin - Gamified Green Staking</p>
    </div>
    <div class="col-12 col-md-4">
     <div class="inContentProviderSingle--rating">
      <div class="rating--holder">
       <p class="rating--text">Rating</p>
       <div class="rating--star-container">
        <div class="rating--star" style="width: 100%;"></div>
       </div>
      </div>
     </div>
    </div>
   </div>
   <div class="row">
    <div class="col-12 col-md-12 text-center d-block d-sm-block d-md-none d-lg-none"><img decoding="async" class="inContentProviderSingle--img mb-3" src="https://insidebitcoins.com/wp-content/uploads/2024/02/green-bitcoin.png" alt="Green Bitcoin" width="125" height="60">
    </div>
    <div class="col-12 col-md-8">
     <ul class="inContentProviderSingle--list">
      <li>Contract Audited by Coinsult</li>
      <li>Early Access Presale Live Now - greenbitcoin.xyz</li>
      <li>Predict To Earn - Featured In Cointelegraph</li>
      <li>Staking Rewards &amp; Token Bonuses</li>
      <li>$7+ Million Raised - Ends Soon</li>
     </ul>
    </div> 
    <div class="col-12 col-md-4 d-none d-sm-none d-md-block d-lg-block"><img decoding="async" class="inContentProviderSingle--img float-right" src="https://insidebitcoins.com/wp-content/uploads/2024/02/green-bitcoin.png" alt="Green Bitcoin" width="125" height="60">
    </div>
   </div>
   <div class="row">
    <div class="col-12 text-center">
     <div class="inContentProviderSingle--button"><a href="https://insidebitcoins.com/visit/greenbitcoin" title="Start Trading" rel="noopener noreferrer nofollow">Learn More</a>
     </div>
     <div class="inContentProviderSingle--disclaimerText">
     </div>
    </div>
   </div>
  </div>
 </div>
</div>

Security Vulnerability Discovered in Apple Macs: Your Crypto Wallet Might Be at Risk

Table of Contents

Inside Bitcoins

Other articles published on Mar 23, 2024

Rebel Satoshi ($RBLZ) Holders Count On Market Recovery For Huge Profits While Toncoin And dogwifh...

MARKETS INSIGHT - VOLATILITY OVERVIEW VOL.10

Bankers go bonkers as FTX dangles 8% stake in hot AI startup Anthropic

Do Kwon officially released from Montenegro prison amid extradition drama, Terra surges 20%

China Surpasses U.S. in Producing AI Talent, Shifting Global Dynamics

29 Days To Bitcoin Halving: Is Shiba Inu Price Eyeing Another Huge Rally? BUY SHIB NOW?

Join our free newsletter for daily crypto updates!