3 ms·
> Maybe they should find logic gates in the decompression algorithm There is an iMessage zero-click exploit from NSO Group used in the wild. Project Zero did a
by acchow 5y ago
> Maybe they should find logic gates in the decompression algorithm
There is an iMessage zero-click exploit from NSO Group used in the wild. Project Zero did a deep dive on it:
https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i...
After a series of steps, the exploit eventually arrives at the need to do general computation. They achieve this by utilizing a part of the JBIG2 decompression algorithm, effectively using the phases of decompression to emulate logic gates to eventually build NAND gates, and from that a simple instruction set for a virtual computer. They then execute arbitrary code on this virtual machine.
> use those to emulate a threaded cpu, and launch a multithreaded decoding process on that cpu
This is a tongue-in-cheek joke I suppose. Even if you built multi-threading support on the virtual machine, it is still an emulated environment running within a single-threaded decompression algorithm. So it is effectively single-threaded on the real machine.
> which finds the original decompression process in memory and executes on the same image being decompressed
The original exploit is quite meta, so OP is just making a meta joke here.
When I read the comment I suspected immediately that it was a joke in reference to the above exploit, but it was cryptic enough that I wasn't quite sure.