Stay updated with breaking news from Security Research Device. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Apple has launched a new Security Research website and in its initial postings, says that it is making it easier to report issues, and that it has already awarded almost $20 million in bounty rewards.
Apple’s Security Bounty program has paid nearly $20 million in rewards to security researchers in just two and a half years. Our new site makes it easier than ever for researchers to submit reports on the web, get real-time updates from Apple engineering, and earn recognition for helping to improve security for the users of over 1.8 billion devices worldwide.
Apple has updated its Platform Security Guide, providing more information about how the Unlock with Apple Watch feature in iOS 14.5 and Touch ID on the iMac Magic Keyboard works. The company routinely updates the security guide to incorporate information about new features. The Platform Security Guide contains detailed and in-depth information about Apple's privacy and security mechanisms. For example, the update on Monday sheds new light on the secure channel between the Magic Keyboard with Touch ID and the Secure Enclave in an M1iMac. According to Apple, that channel is "established in t...
The feature uses the same mechanism as auto unlock for Mac. The guide states that a mutually authenticated station-to-station (STS) protocol that uses long-term keys that are established when the feature is enabled. Once two devices are paired, unique and ephemeral keys are negotiated for each unlock request. Apple says the tunnel is negotiated directly between the Secure Enclave is both devices. That means all cryptographic material is kept within that secured box. The distance between the two devices must also be two to three meters or less. An iPhone must also have been unlocked at least ...
I think this discussion should also mention that Signal is a non-profit organization, dedicated to enabling secure and private communications. Yes, it's not strong proof, but it should be taken into account when comparing the goals and motivations of organizations developing various other communicators. The organization behind your communicator app could be in the business of gathering data about you and selling it in various forms (Facebook, Google), in the business of selling hardware and add-on software services (Apple), or in the non-business of trying to provide you wit...