4 ms·
Why is iOS a different story?
by kahnjw 8y ago
Why is iOS a different story?
- saagarjha 8y agoIt’s a big and hard-to-exploit target?
- tptacek 8y agoiOS is one of the world's 3 most important COTS platform targets, along with Chrome and (guessing?) Windows. Localhost privilege escalation on iOS can be a a link in a drive-by jailbreak chain.
- whatusername 8y agoAre there non COTS platform targets more important/valuable than iOS/Chrome/Windows? Some kind of embedded/industrial control system? z/OS?
- iceninenines 8y agoIf the COW bug applied to the xnu kernel generally (shared by macOS, AppleTV, iOS, etc.), it would've been a big kerfuffle. It's still a big deal because it lets malware write to memory/files it shouldn't if they have a way to trick an user or unattended run a local executable. Even with SIP enabled, it would still be bad based on what could be implanted and always running as a root daemon by clever exploitation of this.
- geofft 8y agoiOS has universal inter-app sandboxing. macOS is getting there, but not quite yet. So on iOS, a privilege escalation vulnerability is useful for getting data out of a different unprivileged context; on macOS, you might already be in that context.