Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

DMP security flaw in M1 chips

Found info about security flaw built into silicone of M1 and M2 chips!! Allows for decryption of encrypted data and access to supposedly secure information. What is Apple doing about this? Should there be a recall on M1 and M2 chips? M3 is apparently not affected. Can I get my chip replaced? I spent over $4K on my baby and I feel like I can't trust it.

Posted on Mar 22, 2024 7:08 PM

Reply
Question marked as Top-ranking reply

Posted on Mar 23, 2024 6:37 AM

catbirdee wrote:

Found info about security flaw built into silicone of M1 and M2 chips!! Allows for decryption of encrypted data and access to supposedly secure information. What is Apple doing about this? Should there be a recall on M1 and M2 chips? M3 is apparently not affected. Can I get my chip replaced? I spent over $4K on my baby and I feel like I can't trust it.



There are always vulnerabilities...


latest breaking ref:

https://appleinsider.com/articles/24/03/21/apple-silicon-vulnerability-leaks-encryption-keys-and-cant-be-patched-easily


...real-world risks are low

To exploit the vulnerability, an attacker would have to fool a user into installing a malicious app, and unsigned Mac apps are blocked by default. ref: https://9to5mac.com/2024/03/22/unpatchable-security-flaw-mac/


Apple has so far chosen not to implement protection against the Augury DMP exploit, likely because the performance hit wouldn’t be justified by the very low real of a real-world attack.



For your concern—


Call Customer Support (800) MY–APPLE (800–692–7753)


Outside the USA—Contact Apple for support and service by phone

See a list of Apple phone numbers around the world.

Contact Apple for support and service - Apple Support


submit your Apple Feedback here: Product Feedback - Apple


Contact the corporate office Contact - How to Contact Us - Apple





1 reply
Sort By: 
Question marked as Top-ranking reply

Mar 23, 2024 6:37 AM in response to catbirdee

catbirdee wrote:

Found info about security flaw built into silicone of M1 and M2 chips!! Allows for decryption of encrypted data and access to supposedly secure information. What is Apple doing about this? Should there be a recall on M1 and M2 chips? M3 is apparently not affected. Can I get my chip replaced? I spent over $4K on my baby and I feel like I can't trust it.



There are always vulnerabilities...


latest breaking ref:

https://appleinsider.com/articles/24/03/21/apple-silicon-vulnerability-leaks-encryption-keys-and-cant-be-patched-easily


...real-world risks are low

To exploit the vulnerability, an attacker would have to fool a user into installing a malicious app, and unsigned Mac apps are blocked by default. ref: https://9to5mac.com/2024/03/22/unpatchable-security-flaw-mac/


Apple has so far chosen not to implement protection against the Augury DMP exploit, likely because the performance hit wouldn’t be justified by the very low real of a real-world attack.



For your concern—


Call Customer Support (800) MY–APPLE (800–692–7753)


Outside the USA—Contact Apple for support and service by phone

See a list of Apple phone numbers around the world.

Contact Apple for support and service - Apple Support


submit your Apple Feedback here: Product Feedback - Apple


Contact the corporate office Contact - How to Contact Us - Apple





Reply

DMP security flaw in M1 chips

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.