Summary

Gruber corrects an assumption he made in his MacBook Neo review — that hardware camera indicator lights are inherently more secure than on-display indicators. Apple's Platform Security Guide reveals that the MacBook Neo's on-screen camera indicator runs inside a secure exclave on the A18 Pro chip, isolated from the kernel and macOS entirely. This means even a kernel-level exploit cannot enable the camera without the indicator appearing. Gruber uses expert context from developer Guilherme Rambo to explain the architecture, and points readers to a deeper resource on Apple's exclave evolution.

Key Insight

Apple's on-screen camera indicator on the MacBook Neo is as secure as a hardware light — not despite being software, but because it runs in a kernel-isolated secure exclave that cannot be overridden by even root-level exploits.

Spicy Quotes (click to share)

• 4

  One might presume that the dedicated indicator lights are significantly more secure than the rendered-on-display indicators. I myself made this presumption in the initial version of my MacBook Neo review last week. This presumption is, I believe, wrong.

• 3

  The architecture is designed to prevent any untrusted software — even with root or kernel privileges in macOS — from engaging the camera without also visibly lighting the on-screen camera indicator light.

• 4

  Even a kernel-level exploit would not be able to turn on the camera without the light appearing on screen.

• 2

  It runs in a privileged environment separate from the kernel and blits the light directly onto the screen hardware.

• 2

  All of that applies to the mic indicator as well, which is a bonus compared to the camera-only hardware indicator.

• 2

  Exclaves run on a completely isolated realtime operating system that communicates with the kernel and userspace using a very limited API surface.

• 7

  That's right, his text message had a footnote.

Tone

technical, self-correcting, curious