Apple Security Chip Has A Flaw + Zoom to roll out End-to-End Encryption | Tech for the People Today – October 14th

Apple Security Chip Has A Flaw + Zoom to roll out End-to-End Encryption | Tech for the People Today – October 14th

Apple’s T2 Chip Has a Flaw

As reported by Wired last week, the secure enclave chip in recent Apple computers has a bug. The T2 chip has is based on the same processors that Apple uses in the iPhone line, where a similar issue has already been used to jailbreak phones. Jailbreaking, or rooting, lets you have full control over the phone – installing apps that Apple doesn’t have on the App Store, configuring settings they don’t expose and so on. But it also comes with security risks as you’ve (metaphorically) opened up your device completely. Applying the same concept to your Mac computer, an attacker could potentially access anything on your hard drive.

The T2 Development Blog has a pretty technical article and linked video showing how they’ve used this in the real world.

Thankfully, someone looking to take advantage of this issue would need to physically be at your computer to do so – it can’t be done remotely. Unfortunately, Apple won’t be able to just issue a software update that fixes this, though they could mitigate some risks.

Zoom to Roll Out End-To-End Encryption

In some good news (because we need some right now ), Zoom has announced that next week it will start enabling end-to-end encryption (E2EE) for all users of its software. While the DOJ is ramping up attacks on E2EE, it’s great to see Zoom taking this step to secure our communications. Be sure to update Zoom on your computer/phone when it comes out!

Clear Moves From Airports to Your Entire Life

Back to the scary stuff. Clear, the company that travelers could pay $179/year to verify their identity and then get access to a much shorter boarding line, has been suffering along with the airline industry as the COVID-19 crisis continues. As OneZero says, Clear “wants to be a holistic identity platform, covering more intimate moments in our everyday life.”

Trusting Clear with your identity will be full of problems. The company exists to make money, of course. And so it’s “even explored sharing that data with partners for marketing purposes.”

Is handing over your data worth quicker access to ballpark snacks and airport boarding? Before you answer yes, consider who else that data will be repackaged and sold to.