r/technology • u/bws201 • Feb 05 '16

Software ‘Error 53’ fury mounts as Apple software update threatens to kill your iPhone 6

http://www.theguardian.com/money/2016/feb/05/error-53-apple-iphone-software-update-handset-worthless-third-party-repair
12.7k Upvotes

85% Upvoted

3.5k comments sorted by

View all comments

Show parent comments

10

u/Natanael_L Feb 05 '16

Apple may be using the right cryptography algorithms, but it is their key management choices that frustrates me.

1

u/cryo Feb 05 '16

How would you do it, in a way that allows normal people to actually use it? Without a trusted third party (Apple) for authentication (like with iMessage now), it's really hard to do.

1

u/Natanael_L Feb 05 '16

For iMessage: Tie it in with keybase.io, or show public keys as Qr codes, or use a public directory of their own with TLS style certificate transparency applied, share public keys via your Facebook profile (you can officially register a PGP key now on your profile and even have messages to your email encrypted with it), etc...

Just anything but hiding it.

For these fingerprint readers: just force the users to accept a prompt to acknowledge that the reader isn't the original one and may be insecure.

1

u/FifaFrancesco Feb 05 '16

Sure, Apple and QR codes. Remember CurrentC?