THREAT MODELLING AND ANALYZING IPHONE MIRRORING

Summary from the TLDR InfoSec newsletter

Aaron Schlitt found security flaws in Apple's iPhone Mirroring feature, such as bypassing camera and microphone restrictions via shortcuts and accessing wallet data through NFC, which he notified Apple about. While Apple added some security measures through the Secure Enclave, the feature created new attack vectors and exhibited inconsistent security, especially with locked apps and Stolen Device Protection. Apple's responses varied; some reports were initially dismissed as "expected behavior" but later addressed in updates, indicating an unclear threat model for iPhone Mirroring within the company.