MIT researchers find unpatchable Apple M1 security flaw

[Jan]

Apple M1 has an unfixable security flaw — researchers

MIT researchers have disclosed an attack against Apple’s M1 processors that could give attackers arbitrary code execution abilities on macOS systems.

The researcher said the attack lies in the intersection of hardware and software attacks.

 

[Jet-Fighter7700]

it always works, clearly it does,
not always for the user it seems.

 

[r00igev@@r]

Fake news. A Mac is never hacked.

 

[TelkomUseless]

 

[Bryn]

From their own website:

 

[prod]

If I'm not mistaken this applies to any ARM processor using Pointer Authentication? It says in the paper:

In 2017, ARM introduced Pointer Authentication (PA for short) in ARMv8.3 [55] as a security feature to protect pointer integrity. Since 2018, Pointer Authentication has been supported in Apple processors, including multiple generations of mobile processors [33] and the recent M1, M1 Pro, and M1 Max chips [5, 7]. Multiple chip manufactures, including ARM, Qualcomm, and Samsung, have either announced or are expected to ship new processors supporting Pointer Authentication

Fascinating stuff regardless, MIT ftw