What would happen if a government issues a subpoena for the passkeys stored in say, iCloud in this case? Would not that makes it easier for them to have access to an individual's private communications, for example?
> What would happen if a government issues a subpoena for the passkeys stored in say, iCloud in this case?
From [1], "Keychain items are transferred from device to device, travelling through Apple servers, but are encrypted in such a way that Apple and other devices can’t read their contents."
Apple doesn’t copy over your private key, if you don’t have something interesting. But if you do have something interesting, then governments could ask, I request that you copy over the private keys for these individuals with 2 weeks, and not disclose this request. Of course, iOS is closed source and users will never know.
It’s access on demand when needed. It can be done with or without passkeys, but the statements that Apple doesn’t have your passkey is inaccurate.
>> Once created, the passkey can be stored in iCloud’s Keychain and synced across multiple devices—meaning your passkeys will be available on your iPad and MacBook without any extra work.
So apparently you can transfer a passkey from device to device through cloud.
Interesting. Do you happen to know if OS makers are currently adapting and applying more changes such as the one you described on the x64 feature? Thanks for sharing the link.
It has already been done, e.g. windows DEP. Main blocker is that software which generates code needs to be adapted to tell the OS where it put that code.
Attackers adapted by e.g.inventing Return Oriented Programming(ROP): As they could not inject code into processes directly, they started overwriting the stack with adresses to interesting functions. When an attacked function returns, it does not resume the caller, but executes code in the executable chosen by attackers, with args dictated by the attacker.
I'm also assuming that with your system engineering background, you're also limiting personnel access to the reactors or better, to the rooms where they will be located as well as all security measures to avoid social engineering hacking into the facilities, right Vincent?
Congrats on the initiative, just absolutely fantastic!
Of course! As the factories get larger and larger, security becomes even more important, and traditional methods such as limiting access, badge-in/ badge-out, and access codes would be utilized.
