Security Bite: Apple's push for chip independence could boost device security - 9to5Mac

Since Apple launched its M-series processors and recently the C1 cellular modem, the company has been slowly but surely moving toward complete chip independence.Apple is even working on its own Bluetooth and Wi-Fi solution, which is reportedly coming with new Home products and the iPhone 17 lineup in the Fall.One obvious benefit of developing chips in-house is energy efficiency.

Apple toated this with the introduction of Apple Silicon what feels like a hundred years ago, and with its latest C1 modem, which gives the iPhone 16e nearly 20% better battery life over the flagship iPhone 16.While improved battery life is certainly appealing, there are less obvious and possibly more significant benefits of Apple having end-to-end control over both the software and hardware components.This is , where I share insights on data privacy, vulnerabilities, or emerging threats within Apple’s vast ecosystem of over 2 billion active devices each week.

Mosyle, the only Apple Unified Platform..Apple has learned some lessons from past vulnerabilities in third-party chips.

In 2017, Nitay Artenstein discovered what was known as the Broadpwn flaw—a memory corruption bug in Broadcom’s Wi-Fi chipset firmware that could allow an attacker to execute code remotely within a certain radius.Over a billion Wi-Fi-capable devices and access points, including iPhone 7 and previous generations, were affected.It was not long until 2020 when another vulnerability was discovered on a Broadcom Wi-Fi chipset that left devices exposed to eavesdropping.

And that’s just Wi-Fi chips… The scary part is how long the vulnerability existed before it was discovered (hopefully by the good guys) and how long it takes to push out a patch afterward.Nobody has control over the former, but in both cases above, it took months between the flaws being reported and patches released.Apple-made components aren’t perfect either, but because the in-house hardware and software teams are already closely integrated, it should, in theory, allow for faster response times without waiting on third-party companies.

Apple would just need to queue up a Rapid Security Response, and boom, it’s automatically patched on billions of devices overnight.A second key benefit lies in the supply chain.Supply chain attacks, where hackers target vendors or suppliers with access to a company’s hardware, software, or network, have surged in recent years.

While Apple was holding its ‘Spring Loaded’ event in April 2021, it was also facing a situation behind the scenes.The group behind the REvil ransomware claimed to have breached Quanta Computer, a key Apple contractor in Taiwan, obtaining schematics believed to be for upcoming unreleased products, including MacBook designs.Even firms like Apple are only as strong as its weakest link.

It doesn’t matter how good your corporate security posture is if a supplier is breached.For Apple, which relies on a global network of chip manufacturers and component suppliers (like Broadcom, Qualcomm, etc.), this is, of course, a concern.By developing its own chips (aka having full end-to-end oversight of both development and implementation), Apple could help minimize exposure, decreasing the likelihood of threats.

In addition, if vulnerabilities were discovered, there would be fewer hurdles needed to cross to push out patches.Of course, this is my security outlook on the firm’s transition to developing more components in-house.I think this is a significant win for consumers, but I’d love to hear what others think! Leave a comment below.

Follow Arin: LinkedIn, Threads, X More in Apple security FBI releases 2024 Internet Crime Report, ‘new record for losses’ PSA: iOS 18.5 patches over 30 iPhone security vulnerabilities iPhone spyware company NSO must pay Meta $167M for WhatsApp attack [U] Your browser uses a psychological trick to stop phishing — and you probably never noticed If you used Siri between 2014 and 2024, you may have a claim against Apple   You’re reading 9to5Mac — experts who break news about Apple and its surrounding ecosystem, day after day.Be sure to check out our homepage for all the latest news, and follow 9to5Mac on Twitter, Facebook, and LinkedIn to stay in the loop.Don’t know where to start? Check out our exclusive stories, reviews, how-tos, and subscribe to our YouTube channel

Read More
Related Posts