{"id":2077,"date":"2024-03-23T09:43:25","date_gmt":"2024-03-23T16:43:25","guid":{"rendered":"https:\/\/www.digivideoplus.com\/dv_blog\/?p=2077"},"modified":"2024-03-23T09:43:25","modified_gmt":"2024-03-23T16:43:25","slug":"apples-m-series-security-promises-%e2%89%a0-perfection","status":"publish","type":"post","link":"https:\/\/www.digivideoplus.com\/dv_blog\/2024\/03\/23\/apples-m-series-security-promises-%e2%89%a0-perfection\/","title":{"rendered":"Apple&#8217;s M-Series security \u2013 promises \u2260 perfection"},"content":{"rendered":"\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/www.digivideoplus.com\/dv_blog\/wp-content\/uploads\/2024\/03\/go_fetch.png\"><img loading=\"lazy\" decoding=\"async\" width=\"512\" height=\"322\" src=\"https:\/\/www.digivideoplus.com\/dv_blog\/wp-content\/uploads\/2024\/03\/go_fetch.png\" alt=\"\" class=\"wp-image-2076\" srcset=\"https:\/\/www.digivideoplus.com\/dv_blog\/wp-content\/uploads\/2024\/03\/go_fetch.png 512w, https:\/\/www.digivideoplus.com\/dv_blog\/wp-content\/uploads\/2024\/03\/go_fetch-300x189.png 300w\" sizes=\"auto, (max-width: 512px) 100vw, 512px\" \/><\/a><\/figure>\n\n\n\n<p>&#8220;GoFetch&#8221; is in the tech news cycle this week.<\/p>\n\n\n\n<p>Hopefully you know whether you have an Apple M-Series Mac. The M-Series (aka Apple silicon) computers advanced better performance and energy efficiency. How about security? \u2013 faster data pipelining is tricky (via so-called optimizations). Obscurity&#8217;s no guarantee (like, really, the front door key&#8217;s not in a nearby flower pot, eh).<\/p>\n\n\n\n<p>This article (below) provides an overview of the situation (and references for more technical detail). The author uses a car safety analogy to frame advice for the latest security vulnerability. No need to panic (and there&#8217;s no recall, like for a car).<\/p>\n\n\n\n<p>Hopefully most people understand what encryption is \u2013 how it keeps our data and communications safe. Like spy-versus-spy stuff, eh.<\/p>\n\n\n\n<p>\u2022 PC World &gt; &#8220;<a href=\"https:\/\/www.pcworld.com\/article\/2277516\/3-takeaways-from-apples-huge-m-series-cpu-security-vulnerability.html\" data-type=\"link\" data-id=\"https:\/\/www.pcworld.com\/article\/2277516\/3-takeaways-from-apples-huge-m-series-cpu-security-vulnerability.html\" target=\"_blank\" rel=\"noreferrer noopener\">Apple&#8217;s unfixable CPU exploit: 3 practical security takeaways<\/a>&#8221; by Alaina Yee (Mar 22, 2024) \u2013 After Intel&#8217;s and AMD&#8217;s past vulnerabilities, Apple&#8217;s vulnerability demonstrates that security is a dynamic goal.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>As reported by Ars Technica, this security flaw allowed academic researchers to pull end-to-end encryption keys from Apple&#8217;s processors, using an app with normal third-party software permissions in macOS. Called GoFetch, the attack they created works through what&#8217;s called a side-channel vulnerability \u2013 using sensitive information discovered through watching standard behavior. It&#8217;s a bit akin to observing armored-car guards carry bags out of a business, and valuing the contents based on how heavy they seem (e.g., gold vs. paper cash).<\/p>\n\n\n\n<p>\u2026 you should create a multilayered approach to protecting yourself, \u2026 Think of it like a car \u2013 we know that a car crashes happen, with deadly results. Over time, we&#8217;ve mandated seatbelts, upgraded materials to have better force absorption, standardized airbags, switched to anti-lock brakes, devised proximity detectors and audio warnings, and more, all to improve safety.<\/p>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>&#8220;GoFetch&#8221; is in the tech news cycle this week. Hopefully you know whether you have an Apple M-Series Mac. The M-Series (aka Apple silicon) computers advanced better performance and energy efficiency. How about security? \u2013 faster data pipelining is tricky (via so-called optimizations). Obscurity&#8217;s no guarantee (like, really, the front door key&#8217;s not in a [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,126,15,127],"tags":[96,236,36],"class_list":["post-2077","post","type-post","status-publish","format-standard","hentry","category-computer","category-desktop","category-news","category-notebook","tag-apple","tag-safety","tag-security"],"_links":{"self":[{"href":"https:\/\/www.digivideoplus.com\/dv_blog\/wp-json\/wp\/v2\/posts\/2077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.digivideoplus.com\/dv_blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.digivideoplus.com\/dv_blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.digivideoplus.com\/dv_blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.digivideoplus.com\/dv_blog\/wp-json\/wp\/v2\/comments?post=2077"}],"version-history":[{"count":1,"href":"https:\/\/www.digivideoplus.com\/dv_blog\/wp-json\/wp\/v2\/posts\/2077\/revisions"}],"predecessor-version":[{"id":2078,"href":"https:\/\/www.digivideoplus.com\/dv_blog\/wp-json\/wp\/v2\/posts\/2077\/revisions\/2078"}],"wp:attachment":[{"href":"https:\/\/www.digivideoplus.com\/dv_blog\/wp-json\/wp\/v2\/media?parent=2077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.digivideoplus.com\/dv_blog\/wp-json\/wp\/v2\/categories?post=2077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.digivideoplus.com\/dv_blog\/wp-json\/wp\/v2\/tags?post=2077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}