3 ms·
Absolutely phenomenal hack. This is state-actor-level stuff. I'm no expert, but iPhone might also use essentially the same ARM TrustZone/SecurCore tech as per
by Whitespace 9y ago
Absolutely phenomenal hack. This is state-actor-level stuff.
I'm no expert, but iPhone might also use essentially the same ARM TrustZone/SecurCore tech as per [0].
If that's the case I wouldn't be surprised if we saw the same group targeting iPhones in a couple of months.
[0] https://en.wikipedia.org/wiki/Apple_A7 https://en.wikipedia.org/wiki/Apple_A7
- shaded-enmity 9y agoThe prerequisite for mounting this attack is kernel code execution already [0]: > We show that a malicious kernel driver ... As per [1] the Power management unit is shared between the Application Processor (AP) and the Secure Enclave Processor (SEP) so this attack might work against iPhones as well. [0] https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/tang https://www.usenix.org/conference/usenixsecurity17/technical... [1] https://www.blackhat.com/docs/us-16/materials/us-16-Mandt-Demystifying-The-Secure-Enclave-Processor.pdf https://www.blackhat.com/docs/us-16/materials/us-16-Mandt-De...
- eridius 9y agoI could be wrong, but I don't think sandboxed apps on iOS can control the CPU frequency/voltage like this.