Researcher finds a vulnerability in the iPhone USB-C controller
www.macworld.com
MacworldA security researcher has been able to hack Apples USB-C controllers that are used in current iPhones, which would usually raise concerns about security and the ability to jailbreak the iPhone. But theres probably nothing to worry about.The vulnerability is in the ACE3 USB controller, which Apple introduced with the iPhone 15 lineup in 2023. Cyber Security News reports that researcher Thomas Roth used his knowledge of the previous controller, the ACE2, as the basis to hack the latest controller, using a combination of reverse engineering, RF side-channel analysis, and electromagnetic fault injection. Roth and his team were able to bypass the ACE3s validation checks and install a modified patch into the CPU.Apples controller is more complex than typical USB controllers, handling charging and data transfers, which makes it a target for hackers. However, Roth told Forbes that when he reported the issue to Apple, the company told him that the attack was so complex that they didnt see it as a threat, and Roth agreed with Apples stance.Roth presented his findings at the Chaos Communication Congress last December and it was recently reported by several security outlets. However, Roth presented his findings as early as last June at the Offensive Security Conference. A recording of Roths June presentation is available on YouTube; it appears to be the same as the December CCC presentation.How to protect yourself from hacker attacksAs Apple and Roth state, this attack is so complicated that users dont need to be concerned about it. If a hacker were to exploit this vulnerability, they would need to have physical access to your iPhone. Apple has protections in place within its operating systems and the company releases security patches through OS updates, so its important to install them when they are available.Macworld has several guides to help, including a guide on whether iPhones are virus-proof, how to remove a virus from an iPhone or iPad,whether or not you need antivirus software, alist of Mac viruses, malware, and trojans, and acomparison of Mac security software.
0 Comentários ·0 Compartilhamentos ·17 Visualizações