Hacker News Reader

Comment by wonderous | Hacker News Reader

Maybe for a casual reader, but nothing is misleading about the headline unless you don’t understand how Apple’s Secure Enclave Processor (SEP) works.

For more on that, as mentioned in the linked page, there’s the “Demystifying the Secure Enclave Processor” talk from Blackhat:

https://www.youtube.com/watch?v=7UNeUT_sRos

Or here’s the PDF:

https://www.blackhat.com/docs/us-16/materials/us-16-Mandt-De...

View on HN

> unless you don’t understand how Apple’s Secure Enclave Processor (SEP) works.

So basically it’s only misleading to 99.9999% of people?

Not on HN, where I expect most readers to understand what is firmware and what happens when you have its binaries and/or source code.

I think you’re a bit out of touch in that regard.

I think that 99.99% applies to even HN and it certainly applies to me.

I think the best you can hope for, even here, is that the majority says "from the headline I'm not sure what that means in practice, so I'll reserve judgment until I look into this."

And even that's a tall order.

Even if you understand firmware (which I wouldn't expect of most readers, just some; the reason we develop abstractions is so our fellow hackers can hack on new things instead of studying the same things we already studied and hacked), it's extremely common for companies that keep security software secret to rely on that secrecy for security. You need to understand the Secure Enclave in particular and believe that the Apple folks are both talented and honest enough to implement what they say they're implementing to know that, in this case, that's not what's happening.

Back when this was first posted, the headline on HN from an article was “Secure Enclave decrypted”, which couldn’t be further from the truth. The more nuanced “Secure Enclave firmware decrypted” replaced it, and is vastly more accurate. Both headlines fail a general public test IMO, but at least the “firmware” is factually true!

Reply on news.ycombinator.com