3 ms·
Is this still possible? My lay understanding is that the SEP decrypts kernelspace on-demand, loads the opcodes on a very temporary (and randomly allocated) basi
by caeril 5y ago
Is this still possible? My lay understanding is that the SEP decrypts kernelspace on-demand, loads the opcodes on a very temporary (and randomly allocated) basis, and makes dumping any meaningful amount of the contents out of RAM very difficult.
Not a jailbreaker at all, so happy to be completely wrong on this.
- dwaite 5y agoThe default for images is signed, not encrypted. A new section of self-modifying or encrypted kernel code would probably trigger some red flags.