A Flaw in the Chipset: The Unpatchable Vulnerability and its Consequences

This is a hardware based issue, but it can be fixed with software and other things which we'll talk about in a minute. But basically the issue here is that this is a side Channel attack that lies within the chips deep MP the data memory dependent prefetcher and that is a hardware optimization that predicts the memory addresses of data that running code is likely to access in the near future. The vulnerability here is that data can be leaked out of the core's cache when DMP is enabled.

Now they did say this report says that the DMP on the M3 chip has a special bit that developers can invoke to disable this feature and while this might sound like something to worry about, it's actually good news for Apple users. They're saying "go fetch you shouldn't" because it does not apply to Apple software and hardware cryptography which protects your data. The exploit uses cash timing to make constant time software crypto also lose their constant time guarantees which can leak keys. So I would imagine that the people that this would impact is very very small.

But who knows, it is still interesting to see an unpatchable vulnerability being pointed out out there in the wild. And again, it has been patched in the M3 chip or at least it can be disabled with the M3 chip. The only downside to this whole issue is that if you want to disable it in general, it will lead to Performance loss.

Constant Time Software Crypto and its Implications

I just think there was a lot of misinformation about people thinking that their data and any encryption key can just be stolen because of this that that's not entirely the truth. A lot of this information went way over my head so I will leave the specific details down in the description below if you're smarter than me in this area and you want to read more about it.

The Air Tag Story: A Pregnant Woman's Close Call

and finally, just as tradition here on the channel, let's talk about another crazy air tag story. This one is really wild so a woman who was 3 months pregnant was involved in a car accident in Memphis that seemed to be a planned hit because after being hit in the intersection, the man driving the car that hit her had a black mask on and a gun drawn when she saw the gun that's when she tried to pull into a nearby Firehouse but the carjackers blocked her car and forced her out of the vehicle in front of three firefighters.

There were two men both with guns pointed at her forcing her out of her car. She said "quote all I did was get out of the car, I don't want to risk my life and I already knew I had tracking in my car that's why she knew it was going to be an air tag but you won't guess where it was hidden because you know she said that even though the firemen called the police nothing came of it until later that night when the woman received a notification on her iPhone that her air tag was nearby.

She said that when she looked at it, it brought her to a location near the apartment complex and immediately she called police and gave them her case number but the dispatch apparently said that they'll try to have police go out there but that they're too busy right now to do anything about it so the pregnant woman being too afraid to look for the car herself which I don't blame her she went to sleep and when she woke up, the air tag was now at the city impound from Cops who towed it.

As you can see the carjackers ripped out her rear view mirror to disable her Blue Link carfinder system which is a tracking system but they didn't know that the Saving Grace here was a hidden air tag tucked inside of the pages of a Bible in her car she said that she does this because thieves are not going to steal a Bible that is genius. I really hope that no thieves or carjackers are watching this video because that is a genius spot to put an air tag.

Unfortunately, the carjackers were never arrested and they still have her only key to the car they stole that so she's without a vehicle unless she pays hundreds of dollars to replace the keys and also fix all of the damage that was made to her vehicle. So not a great end to the story but I would imagine that the only reason the carjackers even left the car abandoned wherever it was is because they probably got a notification on their phone that an air tag was following them.

Conclusion

If you enjoyed this episode, I would appreciate it if you gave it a thumbs up also be sure to subscribe so you don't miss the next episode of Apple weekly. Also make sure to get in on that Discord contest I will leave that link down in the description below but anyway, thanks again for watching and I'll see you soon

"WEBVTTKind: captionsLanguage: enwhat's up guys my name is Brandon and welcome back to Apple weekly in this episode we're going to discuss the latest on iOS 18 along with the really random and confusing re-release of iOS 17.4.55 okay so before we talk about iOS 18 let's discuss iOS 17.4.55 Compu was only available as an ipsw file which meant that you had to manually update to it via your computer and the build number was very similar so 21e 236 was the original build number and this new re-release is 237 so just one build higher now I've had a lot of people ask me you know should I go ahead and update to this should I download the file and update my phone to this new build of 17.4.55 that this update was necessary they would have sent it out to everybody via an over theair update we would have seen that populate on our devices if this was an important release and that's the whole reason I never even made a video on this re-release is because it's so insignificant at least with what we have now the details that we have now nothing proves or nothing points to this update being of any significance and by the way this update has nothing to do with the new iPads that was already confirmed that there are no references to the upcoming iPads in this new re-release 17.4.55 beta 1 however we did get an update from Mark Gman that says that the development is ending next week so we should see 17.5 point1 as early as next week but as you know we've been saying that for a while now and nothing has come of it but we'll talk more about that here in a moment now I did just want to let you know that we are currently running a contest in the Apple Den Discord server where whoever shares the best iPhone or Mac tip or what ever Tech tip in that channel the winner is going to get $50 and a shout out in next week's Apple weekly episode we have many other contests coming and a lot more fun stuff planned for WWDC as well so make sure you are in the Discord server okay so now let's talk more about the performance and the battery life on 17.4.55 in the two builds and most people I've seen you know in the Discord server in the comments nobody's really been able to tell any difference between the two builds and that's probably because there is probably nothing really big that's changed between those two builds aside from maybe an additional security patch on the back end or something like that you're not going to see any changes in performance or battery life when you're only one build higher like that but as far as the overall performance on 174.72 point1 and in my initial video I mentioned how you probably won't see a big difference going from 17.4 to 17.4.55 one did fix some of their issues that were going on with 17.4 now that was not me personally and most people did not have you know a big difference going from 17.4 to 17.4.55 one so that was great to see so so far the overall consensus is that performance is great on 17.4.55 on the single core and a 7253 on the multicore so that single core is higher than what we've received in the past it looks like the last time it was that high was on 17.4 on March 6th but you can see it was higher than what we scored before however the multicore is a little bit lower than the previous couple of runs but again no real complaints from me and the same goes with battery life battery life has been just fine for me I am going to pull over my main device here to see how I've been doing in terms of battery life especially with this new build of 17.4.55 tweet pulled up right here because I want to show you that Mark Gman did say over on Twitter or X that beta 1 development for iOS 17.5 finishes next week so he says finishes you know the development finishes that doesn't necessarily mean that the software is coming next week because a lot of times we see the software release and if you look in the code it shows that the you know build date of it was the week prior sometimes a couple of weeks prior so we could see 17.5 beta 1 as early as next week but just because the development finishes does not necessarily mean that we're going to actually see the software release to developers next week so of course I am hoping that we see 17.5 beta 1 next week hopefully on April 2nd but I just wanted to clarify that that tweet does not confirm that we're getting a release next week but again I hope we do see that it's been a while since we've had a new beta and I did also want to mention that we're probably going to see 17.5 beta 1 before the new iPads get announced and we'll talk about that here in a moment but I do not think that two are correlated now because of what we're going to talk about here in a moment with the iPads being delayed okay so now let's talk about iOS 18 because as you guys know I did make a video on this the worldwide developers conference has been officially confirmed for June 10th and it is going to go through the rest of the week as well through June 14th however the big day the big event is going to be on June 10th that's where apple is going to unveil iOS 18 and all of the other software and if you miss my video on this I will leave a link down below and ever since that announcement we've gotten multiple new leaks and rumors about iOS 18 and they are based on the actual code that's floating around right now so the first thing I want to mention is that iOS 18 is not going to feature Apple's own chat GPT like chatbot so this came from Mark Gman at Bloomberg and this should not be a shock to anybody because we've talked about this multiple times how app is not going to have a chatbot at all in iOS 18 but for those who are still curious about it and still thinking it a possibility government did go ahead and say that this is not going to happen instead apple is holding discussions with Google open Ai and by about potential generative AI Partnerships for some of the heavy lifting the offline Ai and generative AI I would expect apples llms their AI to be integrated more into the backend of applications like messages Safari notes all the first-party applications are going to get these AI features maybe not all right away we're probably just going to see a few right away but a lot of the AI features you know based on Apple's own in-house llms are going to be in a first-party applications it's not going to be like something where it searches the web and you know it's it's inside of Siri that's not what we're going to have with iOS 18 but it will be very interesting to see what Apple does in terms of the partnership with open aai or Google or whoever they decide to partner with for that chatbot like feature or for any of the offline generative AI features now we also saw some new rumors about the maps application getting some love Apple Maps is going to get some new features with iOS 18 so it looks like we might be seeing custom routes for Apple Maps with this update and also the iPhone gaining topographic maps support so this is currently an Apple Watch uh specific feature it's a watch OS feature but this could be coming to the iPhone Maps as well Apple Maps on the iPhone and of course we are also expecting the home screen customization in the form of being able to place blank widgets and blank app icons around on the home screen to create kind of a layout that you like and I would expect to see further rumors and further details about iOS 18 leading up to the worldwide developers Conference in June so stay tuned for more rumors on that okay so now let's talk about the upcoming iPad Pro and iPad Air which we've been waiting on for a while now we originally heard that these are coming in March and then we heard they're coming in April and now we're hearing that they're coming in May so this news comes from Mark Gman who says that Apple's going to introduce a new iPad Pro and iPad Air in early May and he says that the reason for the delay is because of the OLED panel supply issues and we got further details and kind of confirmation of this from a report out of Korea and they said that Samsung has been facing poor yields of the 11-in OLED panels and has been unable to meet Apple's order quantity and this is what has Led Apple to transfer some of the orders to LG where they are now likely to supply 60% of the panels of the upcoming iPad Pros so it looks like apple is really facing some issues with the OLED panels which this will be the first time that we get OLED on an iPad so it is understandable to have these delays for something that apple is doing for the first time it's just frustrating that we keep hearing month after month they're coming and now it looks like hopefully early May is the final timeline for these hopefully we actually see them then and as far as I know the iPad Airs are ready and the iPad Pros are the only thing that's kind of holding this release back but in my opinion at this point just wait till the worldwide developers conference to release them I mean you might as well unless Apple has something else planned for WWDC that I don't know about yet it just seems like you may as well wait and get it right you know if it's only going to be a month difference but who knows we'll see it looks like the software is also an issue looks like apple is also you know delaying these you know because they're taking their time with these I should say because they are still working on some software features for iPad OS 17 for the specific iPad so it makes me wonder what type of you know new iPad specific feature we're going to get with these oleds maybe we'll get standby mode on the iPad Pro that's a possibility it's hard to say but there is something in the software that's going to be exclusive to these new iPads at least the new iPad Pro so that will be interesting to watch for now we also got a few new updates on the upcoming iPhone 16 and 16 Pro this week as well so it looks like the a18 pro chip that's going to be coming in the iPhone 16 Pro Models is going to feature a larger die for increased AI performance perance along with an upgraded neural Engine with significantly more cores so this is kind of a given but it was nice to see confirmation that the die is going to be bigger in the a18 Pro chip and that Apple's going to continue with these Pro chips and we also saw that the iPhone 16 might come into new colors with rose and space black so it looks like apple might actually be getting rid of the titanium color which would really be a disappointment that was the bestselling color and the best looking color by far in my opinion so a hope they keep the natural titanium color around but it looks like we might be getting a couple of new colors this year but of course stay tuned Apple I'm sure is testing a lot of different colors right now so that could change and then we also saw the new capture button that's coming for the iPhone 16 this was shown off in a third party case you can see the cutout there and this is going to be apparently below the power button on the right hand side of the phone and we still do not know for sure what this button is going to do but of course it is related to the camera and then also this week we did did see some fresh new iPhone 16 dummy units that have been shared and this one's interesting because the 16 pro and pro Max are rumored at least based on these dummy units to have 6.3 in and 6.9 in displays respectively so we might actually be seeing the screen increase in size this year so we've seen rumors go back and forth on this but according to these latest dummy units we could actually see that and then I also wanted to let you know about two separate security vulnerabilities that you need to know about so the first one I actually made a full video on that is linked up in the cards above and down in the description below please be sure to go and watch that it's very important that was about the MFA bombing attack a fishing attempt on a lot of users it's actually been going around quite a bit lately so that is something I would recommend watching and just an update to that story is that according to 95 Mac where apparently an apple spokesman reached out to them they've said that they have since fixed this issue so they admitted that this was a bug on their end and that users were getting fished through this you know back door this this you know loophole on the back end of their site the forgot password sites and they have since fixed that so I will continue monitoring you know and making sure this is actually fixed and I don't see any more reports of that but as of now that is a good resolution it looked like my video and of course all the other articles were you know good and it served as a good you know press to get apple to fix that issue and then the other security threat that I wanted to talk about is go fch so this is a recently discovered unpatchable vulnerability that impacts Apple's M series chips and there was a lot of misinformation spread about this specific vulnerability and a lot of people really panicking for absolutely no reason so basically what this is is a flaw in the chipset inside this is a hardware based issue but it can be fixed with software and other things which we'll talk about in a minute but basically the issue here is that this is a side Channel attack that lies within the chips deep MP the data memory dependent prefetcher and that is a hardware optimization that predicts the memory addresses of data that running code is likely to access in the near future and the vulnerability here is that data can be leaked out of the core's cache when DMP is enabled now they did say this report says that the DMP on the M3 chip has a special bit that developers can invoke to disable this feature and while this might sound like something to worry about and like a big issue it's important to note that a ex Apple security engineer said this on X if you're panicking about go fetch you shouldn't it does not apply to Apple s so's Hardware cryptography which protects your data the exploit uses cash timing to make constant time software crypto alos lose their constant time guarantees which can leak keys so I would imagine that the people that this would impact is very very small but who knows it is still interesting to see an unpatchable vulnerability you know pointed out out out there in the wild but I just think there was a lot of misinformation about people thinking that their data and any encryption key can just be stolen because of this that that's not entirely the truth and again it has been patched in the M3 chip or at least it can be disabled with the M3 chip the only downside to this whole issue is that if you want to disable it in general it will lead to Performance loss and I will say that a lot of this information went way over my head so I will leave the specific details down in the description below if you're smarter than me in this area and you want to read more about it and then finally just as tradition here on the channel let's talk about another crazy air tag story and this one is really wild so a woman who was 3 months pregnant was involved in a car accident in Memphis that seemed to be a planned hit because after being hit in the intersection the man driving the car that hit her had a black mask on and a gun drawn when she saw the gun that's when she tried to pull into a nearby Firehouse but the carjackers blocked her car and forced her out of the vehicle in front of three firefighters there were two men both with guns pointed at her forcing her out of her car and she said quote all I did was get out of the car I don't want to risk my life and I already knew I had tracking in my car and that tracking as you guessed it is going to be the air tag but you won't guess where it was hidden because you know she said that even though the firemen called the police nothing came of it until later that night when the woman received a notification on her iPhone that her air tag was nearby she said that when she looked at it it brought her to a location near the apartment complex and immediately she called police and gave them her case number but the dispatch apparently said that they'll try to have police go out there but that they're too busy right now to do anything about it so the pregnant woman being too afraid to look for the car herself which I don't blame her she went to sleep and when she woke up the air tag was now at the city impound from Cops who towed it and as you can see the car jackers ripped out her rear view mirror to disable her Blue Link carfinder system which is a tracking system but they didn't know that the Saving Grace here was a hidden air tag tucked inside of the pages of a Bible in her car she said that she does this because thieves are not going to steal a Bible that is genius I really hope that no thieves or carjackers are watching this video because that is a genius spot to put an air tag unfortunately the carjackers were never arrested and they still have her only key to the car they stole that so she's without a vehicle unless she pays hundreds of dollarss to replace the key and also fix all of the damage that was made to her vehicle so not a great end to the story but I would imagine that the only reason the carjackers even left the car abandoned wherever it was is because they probably got a notification on their phone that an air tag was following them but anyways guys I hope you enjoyed this episode if you did I would appreciate if you give it a thumbs up also be sure to subscribe so you don't miss the next episode of Apple weekly also make sure to get in on that Discord contest I will leave that link down in the description below but anyway anyways guys thanks again for watching and I'll see you soonwhat's up guys my name is Brandon and welcome back to Apple weekly in this episode we're going to discuss the latest on iOS 18 along with the really random and confusing re-release of iOS 17.4.55 okay so before we talk about iOS 18 let's discuss iOS 17.4.55 Compu was only available as an ipsw file which meant that you had to manually update to it via your computer and the build number was very similar so 21e 236 was the original build number and this new re-release is 237 so just one build higher now I've had a lot of people ask me you know should I go ahead and update to this should I download the file and update my phone to this new build of 17.4.55 that this update was necessary they would have sent it out to everybody via an over theair update we would have seen that populate on our devices if this was an important release and that's the whole reason I never even made a video on this re-release is because it's so insignificant at least with what we have now the details that we have now nothing proves or nothing points to this update being of any significance and by the way this update has nothing to do with the new iPads that was already confirmed that there are no references to the upcoming iPads in this new re-release 17.4.55 beta 1 however we did get an update from Mark Gman that says that the development is ending next week so we should see 17.5 point1 as early as next week but as you know we've been saying that for a while now and nothing has come of it but we'll talk more about that here in a moment now I did just want to let you know that we are currently running a contest in the Apple Den Discord server where whoever shares the best iPhone or Mac tip or what ever Tech tip in that channel the winner is going to get $50 and a shout out in next week's Apple weekly episode we have many other contests coming and a lot more fun stuff planned for WWDC as well so make sure you are in the Discord server okay so now let's talk more about the performance and the battery life on 17.4.55 in the two builds and most people I've seen you know in the Discord server in the comments nobody's really been able to tell any difference between the two builds and that's probably because there is probably nothing really big that's changed between those two builds aside from maybe an additional security patch on the back end or something like that you're not going to see any changes in performance or battery life when you're only one build higher like that but as far as the overall performance on 174.72 point1 and in my initial video I mentioned how you probably won't see a big difference going from 17.4 to 17.4.55 one did fix some of their issues that were going on with 17.4 now that was not me personally and most people did not have you know a big difference going from 17.4 to 17.4.55 one so that was great to see so so far the overall consensus is that performance is great on 17.4.55 on the single core and a 7253 on the multicore so that single core is higher than what we've received in the past it looks like the last time it was that high was on 17.4 on March 6th but you can see it was higher than what we scored before however the multicore is a little bit lower than the previous couple of runs but again no real complaints from me and the same goes with battery life battery life has been just fine for me I am going to pull over my main device here to see how I've been doing in terms of battery life especially with this new build of 17.4.55 tweet pulled up right here because I want to show you that Mark Gman did say over on Twitter or X that beta 1 development for iOS 17.5 finishes next week so he says finishes you know the development finishes that doesn't necessarily mean that the software is coming next week because a lot of times we see the software release and if you look in the code it shows that the you know build date of it was the week prior sometimes a couple of weeks prior so we could see 17.5 beta 1 as early as next week but just because the development finishes does not necessarily mean that we're going to actually see the software release to developers next week so of course I am hoping that we see 17.5 beta 1 next week hopefully on April 2nd but I just wanted to clarify that that tweet does not confirm that we're getting a release next week but again I hope we do see that it's been a while since we've had a new beta and I did also want to mention that we're probably going to see 17.5 beta 1 before the new iPads get announced and we'll talk about that here in a moment but I do not think that two are correlated now because of what we're going to talk about here in a moment with the iPads being delayed okay so now let's talk about iOS 18 because as you guys know I did make a video on this the worldwide developers conference has been officially confirmed for June 10th and it is going to go through the rest of the week as well through June 14th however the big day the big event is going to be on June 10th that's where apple is going to unveil iOS 18 and all of the other software and if you miss my video on this I will leave a link down below and ever since that announcement we've gotten multiple new leaks and rumors about iOS 18 and they are based on the actual code that's floating around right now so the first thing I want to mention is that iOS 18 is not going to feature Apple's own chat GPT like chatbot so this came from Mark Gman at Bloomberg and this should not be a shock to anybody because we've talked about this multiple times how app is not going to have a chatbot at all in iOS 18 but for those who are still curious about it and still thinking it a possibility government did go ahead and say that this is not going to happen instead apple is holding discussions with Google open Ai and by about potential generative AI Partnerships for some of the heavy lifting the offline Ai and generative AI I would expect apples llms their AI to be integrated more into the backend of applications like messages Safari notes all the first-party applications are going to get these AI features maybe not all right away we're probably just going to see a few right away but a lot of the AI features you know based on Apple's own in-house llms are going to be in a first-party applications it's not going to be like something where it searches the web and you know it's it's inside of Siri that's not what we're going to have with iOS 18 but it will be very interesting to see what Apple does in terms of the partnership with open aai or Google or whoever they decide to partner with for that chatbot like feature or for any of the offline generative AI features now we also saw some new rumors about the maps application getting some love Apple Maps is going to get some new features with iOS 18 so it looks like we might be seeing custom routes for Apple Maps with this update and also the iPhone gaining topographic maps support so this is currently an Apple Watch uh specific feature it's a watch OS feature but this could be coming to the iPhone Maps as well Apple Maps on the iPhone and of course we are also expecting the home screen customization in the form of being able to place blank widgets and blank app icons around on the home screen to create kind of a layout that you like and I would expect to see further rumors and further details about iOS 18 leading up to the worldwide developers Conference in June so stay tuned for more rumors on that okay so now let's talk about the upcoming iPad Pro and iPad Air which we've been waiting on for a while now we originally heard that these are coming in March and then we heard they're coming in April and now we're hearing that they're coming in May so this news comes from Mark Gman who says that Apple's going to introduce a new iPad Pro and iPad Air in early May and he says that the reason for the delay is because of the OLED panel supply issues and we got further details and kind of confirmation of this from a report out of Korea and they said that Samsung has been facing poor yields of the 11-in OLED panels and has been unable to meet Apple's order quantity and this is what has Led Apple to transfer some of the orders to LG where they are now likely to supply 60% of the panels of the upcoming iPad Pros so it looks like apple is really facing some issues with the OLED panels which this will be the first time that we get OLED on an iPad so it is understandable to have these delays for something that apple is doing for the first time it's just frustrating that we keep hearing month after month they're coming and now it looks like hopefully early May is the final timeline for these hopefully we actually see them then and as far as I know the iPad Airs are ready and the iPad Pros are the only thing that's kind of holding this release back but in my opinion at this point just wait till the worldwide developers conference to release them I mean you might as well unless Apple has something else planned for WWDC that I don't know about yet it just seems like you may as well wait and get it right you know if it's only going to be a month difference but who knows we'll see it looks like the software is also an issue looks like apple is also you know delaying these you know because they're taking their time with these I should say because they are still working on some software features for iPad OS 17 for the specific iPad so it makes me wonder what type of you know new iPad specific feature we're going to get with these oleds maybe we'll get standby mode on the iPad Pro that's a possibility it's hard to say but there is something in the software that's going to be exclusive to these new iPads at least the new iPad Pro so that will be interesting to watch for now we also got a few new updates on the upcoming iPhone 16 and 16 Pro this week as well so it looks like the a18 pro chip that's going to be coming in the iPhone 16 Pro Models is going to feature a larger die for increased AI performance perance along with an upgraded neural Engine with significantly more cores so this is kind of a given but it was nice to see confirmation that the die is going to be bigger in the a18 Pro chip and that Apple's going to continue with these Pro chips and we also saw that the iPhone 16 might come into new colors with rose and space black so it looks like apple might actually be getting rid of the titanium color which would really be a disappointment that was the bestselling color and the best looking color by far in my opinion so a hope they keep the natural titanium color around but it looks like we might be getting a couple of new colors this year but of course stay tuned Apple I'm sure is testing a lot of different colors right now so that could change and then we also saw the new capture button that's coming for the iPhone 16 this was shown off in a third party case you can see the cutout there and this is going to be apparently below the power button on the right hand side of the phone and we still do not know for sure what this button is going to do but of course it is related to the camera and then also this week we did did see some fresh new iPhone 16 dummy units that have been shared and this one's interesting because the 16 pro and pro Max are rumored at least based on these dummy units to have 6.3 in and 6.9 in displays respectively so we might actually be seeing the screen increase in size this year so we've seen rumors go back and forth on this but according to these latest dummy units we could actually see that and then I also wanted to let you know about two separate security vulnerabilities that you need to know about so the first one I actually made a full video on that is linked up in the cards above and down in the description below please be sure to go and watch that it's very important that was about the MFA bombing attack a fishing attempt on a lot of users it's actually been going around quite a bit lately so that is something I would recommend watching and just an update to that story is that according to 95 Mac where apparently an apple spokesman reached out to them they've said that they have since fixed this issue so they admitted that this was a bug on their end and that users were getting fished through this you know back door this this you know loophole on the back end of their site the forgot password sites and they have since fixed that so I will continue monitoring you know and making sure this is actually fixed and I don't see any more reports of that but as of now that is a good resolution it looked like my video and of course all the other articles were you know good and it served as a good you know press to get apple to fix that issue and then the other security threat that I wanted to talk about is go fch so this is a recently discovered unpatchable vulnerability that impacts Apple's M series chips and there was a lot of misinformation spread about this specific vulnerability and a lot of people really panicking for absolutely no reason so basically what this is is a flaw in the chipset inside this is a hardware based issue but it can be fixed with software and other things which we'll talk about in a minute but basically the issue here is that this is a side Channel attack that lies within the chips deep MP the data memory dependent prefetcher and that is a hardware optimization that predicts the memory addresses of data that running code is likely to access in the near future and the vulnerability here is that data can be leaked out of the core's cache when DMP is enabled now they did say this report says that the DMP on the M3 chip has a special bit that developers can invoke to disable this feature and while this might sound like something to worry about and like a big issue it's important to note that a ex Apple security engineer said this on X if you're panicking about go fetch you shouldn't it does not apply to Apple s so's Hardware cryptography which protects your data the exploit uses cash timing to make constant time software crypto alos lose their constant time guarantees which can leak keys so I would imagine that the people that this would impact is very very small but who knows it is still interesting to see an unpatchable vulnerability you know pointed out out out there in the wild but I just think there was a lot of misinformation about people thinking that their data and any encryption key can just be stolen because of this that that's not entirely the truth and again it has been patched in the M3 chip or at least it can be disabled with the M3 chip the only downside to this whole issue is that if you want to disable it in general it will lead to Performance loss and I will say that a lot of this information went way over my head so I will leave the specific details down in the description below if you're smarter than me in this area and you want to read more about it and then finally just as tradition here on the channel let's talk about another crazy air tag story and this one is really wild so a woman who was 3 months pregnant was involved in a car accident in Memphis that seemed to be a planned hit because after being hit in the intersection the man driving the car that hit her had a black mask on and a gun drawn when she saw the gun that's when she tried to pull into a nearby Firehouse but the carjackers blocked her car and forced her out of the vehicle in front of three firefighters there were two men both with guns pointed at her forcing her out of her car and she said quote all I did was get out of the car I don't want to risk my life and I already knew I had tracking in my car and that tracking as you guessed it is going to be the air tag but you won't guess where it was hidden because you know she said that even though the firemen called the police nothing came of it until later that night when the woman received a notification on her iPhone that her air tag was nearby she said that when she looked at it it brought her to a location near the apartment complex and immediately she called police and gave them her case number but the dispatch apparently said that they'll try to have police go out there but that they're too busy right now to do anything about it so the pregnant woman being too afraid to look for the car herself which I don't blame her she went to sleep and when she woke up the air tag was now at the city impound from Cops who towed it and as you can see the car jackers ripped out her rear view mirror to disable her Blue Link carfinder system which is a tracking system but they didn't know that the Saving Grace here was a hidden air tag tucked inside of the pages of a Bible in her car she said that she does this because thieves are not going to steal a Bible that is genius I really hope that no thieves or carjackers are watching this video because that is a genius spot to put an air tag unfortunately the carjackers were never arrested and they still have her only key to the car they stole that so she's without a vehicle unless she pays hundreds of dollarss to replace the key and also fix all of the damage that was made to her vehicle so not a great end to the story but I would imagine that the only reason the carjackers even left the car abandoned wherever it was is because they probably got a notification on their phone that an air tag was following them but anyways guys I hope you enjoyed this episode if you did I would appreciate if you give it a thumbs up also be sure to subscribe so you don't miss the next episode of Apple weekly also make sure to get in on that Discord contest I will leave that link down in the description below but anyway anyways guys thanks again for watching and I'll see you soon\n"