3 ms·

Jeez, sounds like the T2 is prime to be merged into systemd. Someday we'll find that the image processing function has a bug that lets you control the micropho

• klodolph 8y ago
  Running on the same chip does not mean that there’s no isolation. The T2 has an ARM core with an MMU, different processes can be isolated from one another as well as you can on ordinary OSs. Given that you can’t load software on the T2 you’d have to find some remote hole and then do local privilege escalation. And still certain things will be impossible, even if you control the software on the T2, because there is no hardware access to e.g. read the encryption keys, from what I understand.
  • justapassenger 8y ago
    Phew, that's a solid model! No software ever had both remote holes and local privilege escalation!
    • PascLeRasc 8y ago
      What do you want instead? You seem to be pushing for hardware isolation and when Apple goes and does that, putting encryption and a few other features on its own chip designed to be more secure than the CPU, that's not a good thing?
    • klodolph 8y ago
      Sarcasm aside, this is part of a strategy called “defense in depth”, the general idea is that no part of your system can be completely secure so you add different types of layers to your security just to make it more difficult for attackers. Since the T2 does not need to run user software there are additional options available to make it more secure which are not available for ordinary CPUs. For example, you could completely prevent executable code from being loaded without resetting the chip.
• vectorEQ 8y ago
  thank you. :') these let's put things that parse complicated file/data formats along side security features is just asking for trouble! :D