spc50 said (on February 25, 2021 at 1:02 AM)

In b4 Apple fanboys soft sell this as no big deal :)

smartypants said (on February 25, 2021 at 9:23 AM) (edited on February 25, 2021 at 9:23 AM)

That is on version of OS from a few revisions ago : 11.0.1, not 11.2.x from nowadays.

I think its a big deal, but has no practical value in the wild.

smartypants said (on February 25, 2021 at 9:21 AM) (edited on February 25, 2021 at 10:42 AM)

Probably only a little deal because 11.0.1 stopped shipping long ago and LOTS of patchess since 11.0.1 :

https://support.apple.com/en-us/HT201260

See? Current is 11.2.1, not 11.0.1, as per Apple

And many updates between.

If you bought a M1 computer 2 weeks ago it is shipped from China with OS : 11.1 (not 11.0.1) and Also 2 weeks ago firmware version is "6723.61.3". Also if you plugged in that computer, it tries , if you let it, to immediately install a giant new OS update. The update removes ability to run old sideloaded iPhone apps on m1 macs, so some might stick with 11.1 (not 11.0.1) for a while before letting apple force 11.2.1

THOSE HACKS IN THAT LINK might not have value, if they only work on 11.0.1 version of older OS

Operations Security

What is OPSEC?

Operations Security, or OPSEC, OPSEC is about minimizing attack surfaces and single points of failure through proper habits and policies. It's a systematic and proven process that we can use to deny adversaries information they need to do us harm or interrupt our plans. It's also a mindset that can be applied to any mission or plan.

Although the term originated in the military, OPSEC is now used for so much more. This includes law enforcement, computer and network security, home safety, travel, and so much more.

OPSEC isn't a list of rules, and it's not as simple as using a VPN and keeping your mouth shut. It includes elements of INFOSEC, APPSEC, NETSEC, COMSEC[TRANSEC/SIGSEC/EMSEC], PHYSEC[PERSEC], and (CO)INTEL.

THE OPSEC PROCESS

Identify the information you need to protect
Analyze the threats
Analyze your vulnerabilities
Assess the risk
Apply countermeasures

Understand your own risk/threat model: Who is your adversary? What needs protecting?

The OPSEC Two-Step: Know what to protect and know how to protect it.

Created December 10, 2020

Subscribe via RSS