Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Kernel extensions
Apple Security Research Device
The Apple Security Research Device is a specially fused iPhone that allows security researchers to perform research on iOS without having to defeat or disable the platform security features of iPhone. With this device, a researcher can side-load content that runs with platform-equivalent permissions and thus perform research on a platform that more closely models that of production devices.
Advanced Data Protection for iCloud
Advanced Data Protection for iCloud is an optional setting that offers Apple’s highest level of cloud data security. When a user turns on Advanced Data Protection, their trusted devices retain sole access to the encryption keys for the majority of their iCloud data, thereby protecting it with end-to-end encryption.
Protecting against malware in macOS
Apple operates a threat intelligence process to quickly identify and block malware. Three layers of defense Malware defenses are structured in three layers: 1. Prevent launch or execution of malware: App Store, or Gatekeeper combined with Notarization 2. Block malware from running on customer systems: Gatekeeper, Notarization, and XProtect 3.
Protecting access to user’s health data
HealthKit provides a central repository for health and fitness data on iPhone and Apple Watch. HealthKit also works directly with health and fitness devices, such as compatible Bluetooth Low Energy (BLE) heart rate monitors and the motion coprocessor built into many iOS devices. All HealthKit interaction with health and fitness apps, healthcare institutions, and health and fitness devices require the permission of the user. This data is stored in the Data Protection class Protected Unless Open.
Express Cards with power reserve
If iOS isn’t running because iPhone needs to be charged, there may still be enough power in the battery to support Express Card transactions.
Magic Keyboard with Touch ID
The Magic Keyboard with Touch ID (and the Magic Keyboard with Touch ID and Numeric Keypad) provides a Touch ID sensor in an external keyboard that can be used with any Mac with Apple silicon. The Magic Keyboard with Touch ID performs the role of the biometric sensor; it doesn’t store biometric templates, perform biometric matching, or enforce security policies (for example, having to enter the password after 48 hours without an unlock).
Secure intent and connections to the Secure Enclave
Search the user guide Secure intent provides a way to confirm a user’s intent without any interaction with the operating system or Application Processor.
Startup Disk security policy control for a Mac with Apple silicon
Overview Unlike security policies on an Intel-based Mac, security policies on a Mac with Apple silicon are for each installed operating system. This means that multiple installed macOS instances with different versions and security policies are supported on the same Mac. For this reason, an operating system picker has been added to Startup Security Utility. macOS storage selection to change the security policy.
IPv6 security
Search the user guide All Apple operating systems support IPv6, implementing several mechanisms to protect the privacy of users and the stability of the networking stack. When Stateless Address Autoconfiguration (SLAAC) is used, the IPv6 addresses of all interfaces are generated in a way that prevents tracking devices across networks and at the same time allows for a good user experience by ensuring address stability when no network changes take place.
Welcome
Apple has built a robust set of services to help users get even more utility and productivity out of their devices. These services include Apple ID, iCloud, Sign in with Apple, Apple Pay, iMessage, FaceTime and Find My.
Password Monitoring
Password Monitoring is a feature that matches passwords stored in your Password AutoFill keychain against a continuously updated and curated list of passwords known to have been exposed in leaks from different online organizations. If the feature is turned on, the monitoring protocol continuously matches your Password AutoFill keychain passwords against the curated list.
Boot process for a Mac with Apple silicon
When a Mac with Apple silicon is turned on, it performs a boot process much like that of iPhone and iPad. Boot process steps when a Mac with Apple silicon is started. The chip executes code from the Boot ROM in the first step in the chain of trust. macOS secure boot on a Mac with Apple silicon verifies not only the operating system code itself, but also the security policies and even kexts (supported, though not recommended) configured by authorized users.
Apple Platform Security
Tekenlimiet: 250 Neem geen persoonlijke informatie op in uw opmerking. De maximale tekenlimiet is 250. Verzend
Encryption and Data Protection overview
The secure boot chain, system security, and app security capabilities all help to verify that only trusted code and apps run on a device. Apple devices have additional encryption features to safeguard user data, even when other parts of the security infrastructure have been compromised (for example, if a device is lost or is running untrusted code).
Kernel extensions in macOS
Starting with macOS 11, if third-party kernel extensions (kexts) are enabled, they can’t be loaded into the kernel on demand. Instead, they’re merged into an Auxiliary Kernel Collection (AuxKC), which is loaded during the boot process. For a Mac with Apple silicon, the measurement of the AuxKC is signed into the LocalPolicy (for previous hardware, the AuxKC resided on the data volume).
FaceTime
Security FaceTime is Apple’s video and audio calling service. Like iMessage, FaceTime calls also use the Apple Push Notification service (APNs) to establish an initial connection to the user’s registered devices. The audio/video contents of FaceTime calls are protected by end-to-end encryption, so no one but the sender and receiver can access them. Apple can’t decrypt the data.
Hardware microphone disconnect in Mac and iPad
Security All Mac portables with the Apple T2 Security Chip feature a hardware disconnect that ensures the microphone is disabled whenever the lid is closed. On the 13-inch MacBook Pro and MacBook Air computers with the T2 chip, and on the 15-inch MacBook Pro portables from 2019 or later, this disconnect is implemented in hardware alone.
Document revision history
Added two new Express Mode transactions in Express Cards with power reserve . Secure intent and connections to the Secure Enclave . Malware Removal Tool additions in Protecting against malware in macOS . Updates to Managing FileVault in macOS and Command-line tools. Merged the iOS Security Guide, macOS Security Overview, and the Apple T2 Security Chip Overview Privacy Controls, Siri and Siri Suggestions, and Safari Intelligent Tracking Prevention have been removed.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Kernel
Contact Kernel, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack