Hacker News Reader

Which one of these cores perform the same functions and present the same attack surface as the IME?

Closed source, so we can speculate (or try to reverse engineer/break it).

So at best we have cynicism / paranoia regarding Apple's T2.

That's all anyone has against IME, also. And BridgeOS isn't any more secure. There are tons of known flaws in it.

Part of it runs bridgeOS. The Secure Enclave runs something else altogether called sepOS.

By a 'zero trust' security philosophy, anything short of completely open source is inherently untrustable.

You may not be practicing that philosophy, but that doesn't make those who do "paranoid" any more than corporations implementing PCI-DSS controls.

Security does not work retroactively, only proactively.