Behind the Scenes of iOS Security
9 人推荐 · 跨 11 个月 · 2016–2026

中文导读
Apple 顶级安全主管 Ivan Krstic 在 Black Hat 2016 上的罕见深度公开演讲。他拆解了 iOS 底层安全架构、HomeKit、自动解锁以及 iCloud Keychain,详细展示了多层密钥体系如何在不信任云端的前提下确保端到端数据安全。
为什么 HN 推它
HN 上被无数次推荐的安全硬核范本,是外界能看到对 Apple 设备端与云端安全体系架构剖析最深、最权威的公开分享。
「如果你还没看过 Black Hat 上这场演讲,我强烈建议立刻去补课。」HN 网友原话:if you haven't watched the talk at Black Hat I'd highly recommend it
英文原摘要(HackerTube / Claude 整理)
Apple security head Ivan Krstic gives a Black Hat 2016 talk on iOS security, covering HomeKit, Auto Unlock and iCloud Keychain. He explains key hierarchies and how data can stay safe even in adversarial clouds.
HN repeatedly recommends it as the deepest public look at how iCloud Keychain and Apple's device and cloud security are designed.
HN 上的提及
I found the talk (though I don't pretend to understand it all)
For a really in-depth dive about the iOS class keys system he mentions I recommend this 2016 blackhat talk
Given the way iCloud security works I'm not sure iCloud was breached at all [1].
Talk about iOS security at Black Hat
There's a video of a presentation by Ivan Krstic (head of security engineering, Apple) at Black Hat from 2016 about iOS security