GoFetch Apple CPU Attack

[Sushi]

Hoping more info on GoFetch will be available before Tuesday's podcast. @Steve I don't use twitter so hopefully you will see this topic suggestion.

A new side channel attack against M Series Apple CPUs that does not appear to be fixable in SW without major performance hit.

Current Coverage:

https://www.securityweek.com/new-gofetch-apple-cpu-attack-exposes-crypto-keys/

Unpatchable vulnerability in Apple chip leaks secret encryption keys

Fixing newly discovered side channel will likely take a major toll on performance.

arstechnica.com

GoFetch Vulnerability in Apple M-Series Chips Can Lead to Leaked Encryption Keys

A flaw researchers discovered in Apple Silicon could result in attackers stealing sensitive data from Macs that they have hard access to

www.macobserver.com

Apple Silicon chip flaw can leak encryption keys, say researchers

A new vulnerability in Apple Silicon chips can allow a determined attacker to access a user's data by stealing the cryptographic keys — and a fix could considerably impact encryption performance.

appleinsider.com

 

[Steve]

Oh yeah... I'm all over it. And since there's nothing yet planned as a main topic that will likely be it.

Thanks!!

 

[Sushi]

Oh yeah... I'm all over it. And since there's nothing yet planned as a main topic that will likely be it.

Thanks!!

Glad to hear it. I know many are saying it is a local only flaw, but so was Spectre https://www.schneier.com/blog/archives/2021/03/exploiting-spectre-over-the-internet.html
Wondering if I should hold off on my iPad Pro upgrade I was planning on. Can’t wait to hear your take on it!