Protip: Avoid the intel kernel memory protection flaw by running all of your code within Minix inside Intel Management Engine.
(i.e. everything is terrible. and it goes way down, so go all the way down.)
Only allow 0-9 A-F character set for users' passwords to disguise their hashing method from attackers (and auditors!) when stored in your user database.
With the SEP firmware decrypted and exposed, @SecureTips recommends downgrading to an older iPhone without SEP for the foreseeable future. x.com/msolnik/status/7425464…