3 ms·
One the one hand you've got people writing insanely complex hacks like this. On the other hand there's the guy who was doing whatever he wanted for years just
by w0mbat 5y ago
One the one hand you've got people writing insanely complex hacks like this.
On the other hand there's the guy who was doing whatever he wanted for years just by crafting dodgy plist files. https://blog.siguza.net/psychicpaper/ https://blog.siguza.net/psychicpaper/
- djmips 5y agoHowever that plist hack wasn't anywhere near useful to someone like NSO. Different ballgame.
- marcan_42 5y agoSame class of bug that completely broke Android app signing. In that case it was about ZIP file parsing differences (apps checked at install time by one parser, executed using another parser). And also the same bug class that allowed us to bypass Nintendo's mitigation for the Twilight Hack (Wii Zelda savegame exploit), twice. In that case it was about how they handled the savefile archives slightly differently from existing save data and the game itself. Having multiple parsers for security-sensitive data that isn't just outright signed at an external layer is always a recipe for disaster.