{"id":9172,"date":"2024-03-22T15:02:06","date_gmt":"2024-03-22T15:02:06","guid":{"rendered":"https:\/\/www.bitrabo.com\/discover\/urgent-alert-for-apple-mac-users-your-cryptos-could-be-at-risk\/"},"modified":"2024-03-22T15:02:06","modified_gmt":"2024-03-22T15:02:06","slug":"urgent-alert-for-apple-mac-users-your-cryptos-could-be-at-risk","status":"publish","type":"post","link":"https:\/\/www.bitrabo.com\/discover\/urgent-alert-for-apple-mac-users-your-cryptos-could-be-at-risk\/","title":{"rendered":"Urgent Alert For Apple Mac Users: Your Cryptos Could Be At Risk"},"content":{"rendered":"<p>A newly identified vulnerability in Apple\u2019s M-series processors could have dire implications for crypto users, with the potential to compromise the private keys essential for securing digital assets. This flaw, which resides deep within the microarchitecture of these chips, was first <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/arstechnica.com\/security\/2024\/03\/hackers-can-extract-secret-encryption-keys-from-apples-mac-chips\/\">reported<\/a> by Ars Technica and detailed in a paper published by a collective of researchers from top US universities.<\/p>\n<h2>Mac Users Beware: This Is Crucial For Crypto Owners<\/h2>\n<p>The vulnerability stems from a side channel in the chip\u2019s data memory-dependent prefetcher (DMP), a mechanism designed to enhance computing efficiency. However, this feature inadvertently allows for the extraction of secret keys during cryptographic operations, a process that is fundamental to the security of cryptocurrencies and other digital transactions.<\/p>\n<p>\u201cThe DMP [\u2026] uses the data values in order to make predictions [\u2026] if a data value \u2018looks like\u2019 a pointer, it will be treated as an \u2018address\u2019 [\u2026] the data from this \u2018address\u2019 will be brought to the cache, leaking over cache side channels,\u201d the researchers explained, underscoring the inadvertent risk posed by this hardware optimization.<\/p>\n<p>Dubbed \u201cGoFetch\u201d by its discoverers, this attack method does not require administrative access, raising alarms about the ease with which bad actors could exploit this vulnerability.<\/p>\n<p>According to the team, \u201cWe don\u2019t care about the data value being prefetched, but the fact that the intermediate data looked like an address is visible via a cache channel and is sufficient to reveal the secret key over time.\u201d This discovery is particularly concerning for cryptocurrency holders, as private keys are the linchpin of security for digital wallets and transactions.<\/p>\n<p>The implications of GoFetch are vast, affecting not only traditional encryption protocols but also those designed to be resistant against quantum computing attacks. This puts a wide array of cryptographic keys at risk, including RSA and Diffie-Hellman, along with post-quantum algorithms like Kyber-512 and Dilithium-2.<\/p>\n<p>The researchers reported that \u201cThe GoFetch app requires less than an hour to extract a 2048-bit RSA key and a little over two hours to extract a 2048-bit Diffie-Hellman key,\u201d highlighting the efficiency and danger of this attack vector.<\/p>\n<p>Mitigation of this vulnerability poses a significant challenge due to its hardware-based nature. While software-based defenses can be developed, they often come at the cost of degraded performance, particularly on devices with older M-series chips.<\/p>\n<p>\u201cFor developers of cryptographic software running on M1 and M2 processors [\u2026] they will have to employ other defenses, almost all of which come with significant performance penalties,\u201d the researchers noted, indicating a difficult road ahead for both developers and users.<\/p>\n<p>Apple has yet to make a public statement regarding the GoFetch findings, leaving the tech community and crypto users eagerly awaiting a response. In the meantime, the researchers advise end users to look out for software updates that specifically address this vulnerability.<\/p>\n<p>Given the manual and slow process required to assess an implementation\u2019s vulnerability, the crypto community is faced with a period of uncertainty and heightened risk.<\/p>\n<p>At press time, the Bitcoin price stood at $63,396, down 5.1% in the last 24 hours.<\/p>\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A newly identified vulnerability in Apple\u2019s M-series processors could have dire implications for crypto users, with the potential to compromise the private keys essential for securing digital assets. This flaw, which resides deep within the microarchitecture of these chips, was first reported by Ars Technica and detailed in a paper published by a collective of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":9173,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"slim_seo":{"title":"Urgent Alert For Apple Mac Users: Your Cryptos Could Be At Risk - Bitrabo","description":"A newly identified vulnerability in Apple&#8217;s M-series processors could have dire implications for crypto users, with the potential to compromise the privat"},"footnotes":""},"categories":[316],"tags":[2167,492,1214,2745,1420,2744,732],"class_list":["post-9172","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-crypto-news","tag-alert","tag-apple","tag-cryptos","tag-mac","tag-risk","tag-urgent","tag-users"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/posts\/9172","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/comments?post=9172"}],"version-history":[{"count":0,"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/posts\/9172\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/media\/9173"}],"wp:attachment":[{"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/media?parent=9172"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/categories?post=9172"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/tags?post=9172"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}