The Ledger Podcast cover image

The Ledger Podcast

#82 Securing Yourself: Lessons from the Apple Security Breach

Mar 26, 2024
Charles Guillemet, Ledger's CTO and a seasoned expert in cryptography and security, dives into a critical vulnerability found in Apple’s M1 chips. He explains the implications of this unpatchable flaw and the risks of using devices for securing private keys. Alongside Ian Rogers, they discuss how hardware wallets provide superior security compared to software solutions. Guillemet also highlights the balance between performance and security in chip design, making a compelling case for why robust measures are essential for protecting digital assets.
32:32

Podcast summary created with Snipd AI

Quick takeaways

  • The newly discovered vulnerability in Apple’s M1 chip highlights the critical trade-off between performance and security in chip design.
  • To safeguard digital assets effectively, users should prioritize using hardware wallets over software wallets due to enhanced security features.

Deep dives

Understanding Cryptographic Vulnerabilities

A significant topic discussed involves the vulnerability found in Apple's M1 chip, specifically related to cryptographic operations. This vulnerability stems from a specific implementation of OpenSSL, a widely used cryptographic library, run on the M1 chip, which is designed for performance. The M1 chip's architecture does not prioritize security measures, creating a weak point that attackers can exploit, particularly through side-channel attacks. Such attacks gather information regarding cryptographic operations by measuring physical phenomena like power consumption or timing, leading to potential key recovery and unauthorized access.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode