United

Apple

when

New findings from academics revealed a severe vulnerability in Apple’s M-series chips, which could potentially enable malevolent actors the ability to access confidential encryption keys from MacBook devices.&nbsp;
The <a href="https://arstechnica.com/security/2024/03/hackers-can-extract-secret-encryption-keys-from-apples-mac-chips/" target="_blank" rel="noopener nofollow">report</a>&nbsp;—&nbsp;published on March 21 by a group of researchers from multiple United States-based universities — identified the vulnerability as a side channel exploit, which allows hackers to illicitly obtain end-to-end encryption keys when Apple chips execute commonly used cryptographic protocols. 
However, unlike conventional vulnerabilities that can be remedied through direct patches, this particular issue is deeply rooted in the microarchitectural design of the silicon itself, making it “unpatchable.” 
To properly address the flaw, third-party cryptographic software would need to be utilized and could severely hamper the performance of the Apple M-series chips, particularly the earlier iterations, such as the M1 and M2 chips. 
These findings highlight a major flaw and challenge for Apple’s hardware security infrastructure. Hackers could intercept and exploit memory access patterns to extract sensitive information, such as encryption keys utilized by cryptographic applications.
Related: <a href="https://cointelegraph.com/news/apple-co-founder-wins-youtube-bitcoin-scam-lawsuit">Apple co-founder wins against YouTube in Bitcoin scam lawsuit</a>
The researchers <a href="https://gofetch.fail/" target="_blank" rel="noopener nofollow">labeled</a> this type of hack a “GoFetch” exploit. The hack functions seamlessly within the user environment and requires only standard user privileges, similar to those needed by regular applications.
After the research surfaced, users in online Mac forums began to question whether or not there is now cause for major concern or necessary action regarding password keychains. 
One user said they believed that Apple would mitigate the problem within their operating system directly — if not, they would be “more worried.” 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-03/a38b84c4-e698-4f69-80d8-0e5e188ddc57.png" alt="" title="">
 <figcaption style="text-align: center;">
 A Mac user shares their concerns on the MacRumors website. Source: MacRumors
 </figcaption>
</figure>
Another user said this flaw has been known to Apple for a while and pointed out that it could be why Apple’s M3 has “an added instruction to disable DMP.” The user said the previous research on the topic was called an “augury” and dates back to 2022.&nbsp;
This finding comes as Apple finds itself in an <a href="https://cointelegraph.com/news/us-doj-sue-apple-monopoly-app-store-rules">extensive antitrust lawsuit</a>&nbsp;with the U.S. Department of Justice (DOJ), which claims its Apple App Store rules and “monopoly” illegally throttled competition and suffocated innovation.
The DOJ has also alleged that Apple severed access to competing digital wallets, which provide a “wide variety of enhanced features,” while blocking developers from delivering their own payment services to users.
Magazine: <a href="https://cointelegraph.com/magazine/ai-read-minds-boomers-like-ai-crap-facebook-longevity-app-ai-eye/">Why boomers ‘like’ AI pics on Facebook, mind-reading AI breakthrough: AI Eye </a>

‘Unpatchable’ flaw in Apple M-series chip may allow access to encrypted data

Cointelegraph

2024년 3월 22일에 게재된 다른 기사

3 theories why the SEC may be eyeing down Ethereum: Crypto lawyer

Can Top Crypto Presales GBTC, Memeinator, and Scorpion Casino Offer 100x Gains?

Polkadot Community Coin $PINK All Set to Debut on March 21

Postponement Granted: Montenegro Holds Off Do Kwon Extradition

Navigating the Privacy Paradigm: An Organic Exploration of AnonExch’s Revolutionary Approach

Bitcoin BTC’s Bullish Signal: Inverse Head and Shoulders Pattern Emerges!

무료 뉴스레터에 가입하여 매일 최신 암호화폐 소식을 받아보세요!