iPhone USB-C is hackable, but users don't need to worry yet (www.techspot.com)
from kid@sh.itjust.works to cybersecurity@sh.itjust.works on 17 Jan 17:57
https://sh.itjust.works/post/31249627

#cybersecurity

threaded - newest

9tr6gyp3@lemmy.world on 17 Jan 18:49 collapse

This is what happens when politicians force tech standards.

Telorand@reddthat.com on 17 Jan 19:08 next collapse

That’s not what it sounds like. This is what happens when politicians force reasonable tech standards but let the companies in question implement the standard as cheaply as they want.

Security researcher Thomas Roth recently uncovered several vulnerabilities in Apple’s ACE3 USB-C controller for the iPhone 15 and 16. Although no immediate action is required from users, and these vulnerabilities don’t affect Android devices, Roth’s findings underscore the possibility of future attack methods being developed.

Emphasis mine.

Apple knew they were going to be forced to change, and they could have found a better controller, but they didn’t. They could have followed suit with the Android industry, but they just had to do things in that “walled-garden” way only Apple does.

9tr6gyp3@lemmy.world on 17 Jan 23:00 next collapse

Who do you believe fabricated that controller?

Telorand@reddthat.com on 17 Jan 23:53 collapse

Are you about to pivot into Chinese conspiracy theories? Because if so, I don’t care, unless you have evidence for this specific USB-C controller.

9tr6gyp3@lemmy.world on 18 Jan 00:14 collapse

Mf did you even watch the video? The security researcher explains what happened when the EU forced apple to move to USB-C.

They say what controller they used, which manufacturer made it, how it was exploited, and how that wasn’t an issue on the lightning port.

Ebber@lemmings.world on 18 Jan 10:48 next collapse

How come it’s only Apple devices that are affected and not the others?

9tr6gyp3@lemmy.world on 18 Jan 19:01 collapse

Are apple devices the only phones that use the Texas Instruments ACE3 controller?

ChairmanMeow@programming.dev on 18 Jan 23:17 collapse

Yes. This controller was specifically created for Apple and it’s a proprietary chip.

No other manufacturer uses it, and thus no other manufacturer has these security flaws. Apple didn’t rely on existing, tried and tested controllers but had to make something proprietary and ‘special’, and the fucked up in doing so.

9tr6gyp3@lemmy.world on 19 Jan 02:50 collapse

They had used the ACE2 in previous models, which didn’t have these flaws. What was the difference?

Strykker@programming.dev on 18 Jan 12:17 next collapse

It’s also not an issue on every other USB c controller made.

It’s an apple issue because Apple made poor choices because Apple insists they have to be different in a special broken way. Because people like you are too far up your own ass to know any better.

9tr6gyp3@lemmy.world on 18 Jan 18:59 collapse

Correct. iPhone 14 and under are not affected because they don’t have the texas instruments usb-c controllers. The mandated change brought about the new requirement. They had to move to a less researched, and obviously less secure controller. Itll get better as we go, but its going to be hell for a while as these new flaws are found.

ChairmanMeow@programming.dev on 18 Jan 12:39 collapse

what happened when the EU forced apple to move to USB-C.

Apple messed up is what happened. None of the other manufacturers appears to have this issue, despite the same legislation applying to them.

This is solely on Apple fucking up.

9tr6gyp3@lemmy.world on 18 Jan 18:58 collapse

Correct. iPhone 14 and under are not affected because they don’t have the texas instruments usb-c controllers. The mandated change brought about the new requirement. They had to move to a less researched, and obviously less secure format. Itll get better as we go, but its going to be hell for a while as these new flaws are found.

__nobodynowhere@startrek.website on 18 Jan 01:26 collapse

Wasn’t Apple already using USB-C on iPads? Are the iPads using the same controller or did they change it up?

onlinepersona@programming.dev on 18 Jan 10:13 next collapse

LOL. Apple makes shoddy hardware but Apple fanboys have to find the blame somewhere else of course. Could never be Apple making a mistake. No no no, somebody else fucked up.

Also, if Apple’s major defense is obfuscation, well…

Anti Commercial-AI license

sprack@lemmy.world on 18 Jan 15:30 collapse

I’ve never heard that from anyone EE’s or ME’s in the industry. Overpriced, yes. Never heard the HW called low quality.

Droechai@lemm.ee on 18 Jan 17:33 collapse

Check out Rossman’s old repairs of apple products on youtube

sugar_in_your_tea@sh.itjust.works on 18 Jan 18:18 collapse

Yup. TL;DW:

  • a common short can overvolt the CPU, causing instant death of the CPU
  • display cable breakage due to being too short, and Apple’s only official fix is to replace the whole assembly
  • butterfly keyboard sucked
  • charge mechanism isn’t easy to replace when it inevitably fails

Those are just the ones I remember off the top of my head.

Luffy879@lemmy.ml on 18 Jan 12:04 next collapse

If the Problem was with USB-C, why in gods Name dosent my Android phone have this vulnerability?

9tr6gyp3@lemmy.world on 18 Jan 19:00 collapse

They might be vulnerable if they use the Texas Instruments ACE3 controller probably.

Railcar8095@lemm.ee on 18 Jan 12:44 next collapse

Apple has used usb C for years. They source a faulty controller for the iPhone. The fact that android devices and even iPads aren’t affected is signal enough this is not a USBC specific issue, much less a politically forced standard issue.

Zementid@feddit.nl on 18 Jan 19:11 collapse

This is a really stupid comment.

9tr6gyp3@lemmy.world on 18 Jan 20:01 collapse

Good luck moving to USB-D