# Mac Vulnerability(M1) - Side Channel Attack - Go Fetch **URL:** \ **Category:** Programs & Applications\ **Created:** [March 23, 2024, 3:39am UTC](https://forum.dfinity.org/t/mac-vulnerability-m1-side-channel-attack-go-fetch/28776 "2024-03-23T03:39:00Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![skilesare](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/skilesare/32/5609_2.png) [@skilesare](https://forum.dfinity.org/u/skilesare)\ **Post date:** [March 23, 2024, 3:39am UTC](https://forum.dfinity.org/t/mac-vulnerability-m1-side-channel-attack-go-fetch/28776/1 "2024-03-23T03:39:00Z")
This was forwarded to me today. It would be great to get a comment from the II team about if people need to remove Mac based II keys. And perhaps from plug and other web wallets as to the relevance here as well. This is a lab based exploit at the moment and likely not an eminent threat. > **[Apple Macs Have a Fatal Flaw That Lets Hackers Steal Your Crypto—And There's...](https://decrypt.co/223062/apple-chip-flaw-hackers-steal-crypto-go-fetch)** > > Researchers have revealed a flaw in Apple M1 chips that allows hackers to steal cryptographic keys via CPU manipulation. ---
**Author:** ![ZackDS](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/zackds/32/40368_2.png) [@ZackDS](https://forum.dfinity.org/u/ZackDS)\ **Post date:** [March 24, 2024, 1:51pm UTC](https://forum.dfinity.org/t/mac-vulnerability-m1-side-channel-attack-go-fetch/28776/2 "2024-03-24T13:51:44Z")
Looking deeper into this I found that surprisingly Intel 13th and 14th Gen (Raptor Lake architecture) CPU’s don’t have this vulnerability though they share the same prefetcher as Apple’s M chips. ---
**Author:** ![erikblues](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/erikblues/32/6949_2.png) [@erikblues](https://forum.dfinity.org/u/erikblues)\ **Post date:** [March 27, 2024, 4:34pm UTC](https://forum.dfinity.org/t/mac-vulnerability-m1-side-channel-attack-go-fetch/28776/3 "2024-03-27T16:34:15Z")
I’m also looking for this information. ---
**Author:** ![erikblues](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/erikblues/32/6949_2.png) [@erikblues](https://forum.dfinity.org/u/erikblues)\ **Post date:** [March 27, 2024, 4:47pm UTC](https://forum.dfinity.org/t/mac-vulnerability-m1-side-channel-attack-go-fetch/28776/4 "2024-03-27T16:47:52Z")
I found some more info. Here’s the full description of the hack and how it works from the guys that found it: > **[GoFetch: Breaking Constant-Time Cryptographic Implementations Using Data...](https://gofetch.fail/)** > > A new microarchitectural side-channel attack exploiting data memory-dependent prefetchers in Apple silicons. ---
**Author:** ![ZackDS](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/zackds/32/40368_2.png) [@ZackDS](https://forum.dfinity.org/u/ZackDS)\ **Post date:** [March 27, 2024, 9:07pm UTC](https://forum.dfinity.org/t/mac-vulnerability-m1-side-channel-attack-go-fetch/28776/5 "2024-03-27T21:07:37Z")
TLDR unless you download stuff or access webpages you should be fine knowing you spent a lot of money on shitty hardware. Am I right ?\> ---
**Author:** ![gatsby\_esp](https://avatars.discourse-cdn.com/v4/letter/g/e95f7d/32.png) [@gatsby\_esp](https://forum.dfinity.org/u/gatsby_esp)\ **Post date:** [March 28, 2024, 8:53am UTC](https://forum.dfinity.org/t/mac-vulnerability-m1-side-channel-attack-go-fetch/28776/6 "2024-03-28T08:53:38Z")
This is a serious threat… why does anybody in dfinity address it? ---
**Author:** ![skilesare](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/skilesare/32/5609_2.png) [@skilesare](https://forum.dfinity.org/u/skilesare)\ **Post date:** [March 28, 2024, 2:36pm UTC](https://forum.dfinity.org/t/mac-vulnerability-m1-side-channel-attack-go-fetch/28776/7 "2024-03-28T14:36:22Z")
I don’t think it is quite that serious at the moment as it has only be done in a lab under some pretty controlled circumstances and the thing need lots of crypto operations to work. I’m pretty sure they are doing analysis on it and will say something when they know what to say.