4 ms·
My reading implies you need actual code execution already? As you need to be able lay down the actual auth instruction that you want to force? (Eg nothing so ho
by olliej 4y ago
My reading implies you need actual code execution already? As you need to be able lay down the actual auth instruction that you want to force? (Eg nothing so horrific as simply running js)
Hahah, ok now I have a much better understanding.
It requires an existing path to arbitrary code execution, and a buffer overflow or some such in kernel space.
So yes this does defeat one part of the M1 defensive system, which is clearly suboptimal, but the way the article portrays it is absurd.
- userbinator 4y agobut the way the article portrays it is absurd. Spreading paranoia is how the security industry has always operated. It is its incentive, after all.
- olliej 4y agoI know. I think it's this new* habit of giving literally every issue a marketing name is particularly grating, but such is the way of the world :D * A few years old now I guess