Apple’s M1 series of silicon processors not only exists in its Mac Minis and Macbooks but also resides on the company’s iPads as well. Thus, a cybersecurity vulnerability in the SoC could lead to many modern Apple products being affected if they were to be targeted by a malicious attack.

And after announcing the company’s new M2 silicon processors at Apple WWDC 2022, news broke out that the Apple M1 silicon has been compromised in the cybersecurity department. And as both MacWorld and 9to5Mac quoted MIT researchers, the newly discovered security flaw defeats the last line of security of the M1 SoC and cannot be patched via software updates.

The highly concerning security vulnerability in M1 is named “PACMAN” because it defeats the M1’s Pointer Authentication Code (PAC) system. 

MacWorld explains that pointer authentication is a security feature that helps protect the CPU against an attacker that has gained memory access. Pointers store memory addresses, and pointer authentication code checks for unexpected pointer changes caused by an attack. In its research, MIT CSAIL created “PACMAN,” an attack that can find the correct value to successfully pass pointer authentication, so a hacker can continue with access to the computer.

Macworld quotes an MIT article with MIT CSAIL’s Joseph Ravichandran, who is the co-lead author of a paper explaining PACMAN, “When pointer authentication was introduced, a whole category of bugs suddenly became a lot harder to use for attacks. With PACMAN making these bugs more serious, the overall attack surface could be a lot larger.”

According to MIT CSAIL, since its PACMAN attack involves a hardware device, a software patch won’t fix the problem. The issue is a wider problem with ARM processors that use Pointer Authentication, not just Apple’s M1. “Future CPU designers should take care to consider this attack when building the secure systems of tomorrow,” Ravichandran wrote. “Developers should take care to not solely rely on pointer authentication to protect their software.”

MIT was able to perform the PACMAN attack remotely. The team mentions that they actually did all their experiments over the network on a machine in another room, as they described “PACMAN works just fine remotely if you have unprivileged code execution.”

Macworld reports that Apple is aware of MIT CSAIL’s findings and issued the following statement: “We want to thank the researchers for their collaboration as this proof of concept advances our understanding of these techniques. Based on our analysis as well as the details shared with us by the researchers, we have concluded this issue does not pose an immediate risk to our users and is insufficient to bypass operating system security protections on its own.”

RELATED:

• Apple M2 chip with better performance and capabilities announced for Mac devices
• Apple MacBook Air announced with 13.6-inch display, M2 chip, MagSafe charging, and more
• Apple iPad Air powered by M1 processor and 5G support goes official; price starts at $599
• Get Redmi K50 for as low as $399 on Giztop
• Redmi K50 Standard Review: Dimensity 8100 — probably the Best Chip of the year

(Via 1, Via 2)

The post MIT Discovers New Concerning Cybersecurity Flaw to Apple’s M1 Silicon – PACMAN appeared first on Gizmochina.

On Apple’s March 8 “Peek Performance” Event, Apple has officially unveiled the next generation of its iPad Air lineup with its headlining Apple Silicon, the M1 Chip, 5G connectivity and a wide variety of pastel colour options to choose from.

As pre-orders go live, keen-eyed buyers have noticed that the latest iPad Air 5th Generation (2022) features a design change that Apple has been proud of since the launch of its first iPad back in 2010. Instead of the “iPad” wording engraved under the iconic Apple logo like the older iPad Air 4(2020) and its predecessors, the latest iPad Air 5 (2022) now has the “iPad Air” wording engraved under the Apple logo.

This design change seems rather confusing as the latest M1-powered 5th Generation iPad Pros of 2021 didn’t get the unique treatment as they still have the original “iPad” branding engraved under the Apple logo, and they didn’t switch over to an “iPad Pro” branding instead. The same goes for the iPad 9th Generation (2021) and iPad Mini 6th Generation (2021) which were also launched in September last year. 

Although the change of design seems to be confusing at first, iPad Air 5 buyers were rather unbothered by the design change, as this minimal change didn’t interfere with the tablet’s other functions such as connectivity, battery life or screen quality.

RELATED:

• Apple iPad Air powered by M1 processor and 5G support goes official; price starts at $599
• Apple MacBook models powered by the M2 chipset to launch later this year
• Apple M1 Ultra with 20-core CPU is the world’s most powerful chip for desktop computers

(Source[Apple Marketing Material],  Via)

The post Apple Changes Logo of its iPad Air 5(2022) from “iPad” to “iPad Air” appeared first on Gizmochina.