4 ms·
> Time may improve Apple's risk/reward for enabling virtualization in specific iPad use cases. It's more likely that the EU will improve it. As things stand t
by EMIRELADERO 2y ago
> Time may improve Apple's risk/reward for enabling virtualization in specific iPad use cases.
It's more likely that the EU will improve it.
As things stand today, Android allows for JIT acceleration on all apps, essentially unrestricted. The DMA only allows for security measures that restrict APIs insofar as those measures are "strictly necessary and proportionate".
Since Android manages just fine on that front with full JIT, Apple's defense relying on that DMA exception will fail.
- throwaway3306a 2y agoSo why does my android phone not allow sudo or chroot, and when I root it my bank application stops working, citing the EU payment service regulations? Virtualization is not enabled too, even though the cpu supports it.
- walterbell 2y agoRecent Pixel devices support Android pKVM nested virtualization, with optional 2-way isolation, https://android-developers.googleblog.com/2023/12/virtual-machines-as-core-android-primitive.html https://android-developers.googleblog.com/2023/12/virtual-ma... Even if Android is compromised all the way up to (and including) the host kernel, the isolated VM remains uncompromised This allows virtualized Linux VMs on supported Pixels, running alongside Android, https://www.xda-developers.com/nestbox-hands-on/ https://www.xda-developers.com/nestbox-hands-on/ & https://www.esper.io/blog/android-dessert-bites-13-virtualization-on-pixel-6-379185 https://www.esper.io/blog/android-dessert-bites-13-virtualiz...
- diffeomorphism 2y agoWhen will that come to non-Pixel devices?
- walterbell 2y agoPossibly when Qualcomm brings Oryon (with silicon support for nested virtualization) from laptops to smartphones in late 2024, https://www.androidauthority.com/qualcomm-snapdragon-oryon-cpu-2024-3378729/ https://www.androidauthority.com/qualcomm-snapdragon-oryon-c... & https://www.qualcomm.com/developer/blog/2024/01/gunyah-hypervisor-software-supporting-protected-vms-android-virtualization-framework https://www.qualcomm.com/developer/blog/2024/01/gunyah-hyper... > we have replaced pKVM with Gunyah Hypervisor Software – our own, more versatile hypervisor – on our Qualcomm Technologies’ chipsets. With Gunyah, we can use one hypervisor across use cases as varied as automotive, mobile broadband, IoT and wearables. We’ve upstreamed Gunyah for general use by the Android community.
- Xeamek 2y agoChroot works fine though
- throwaway3306a 2y agoNo, it doesn't. It requires root, and that breaks all the apps.
- sunshinerag 2y ago"... Since Android manages just fine on that front with full JIT" How do we know this? No vulnerabilities/exploits reported using these?
- cqqxo4zV46cp 2y agoThere’s a reason that you’re falling back on imprecise language: “manages just fine”. That is not sufficient ground to responsibility implicate this regulation. There’s an obvious reasonable security argument for Apple to make here. To say otherwise is just letting this stupid OS war get in the way of any actual engineering competency you may have. Be fair.
- meiraleal 2y agoYou aren't really being fair by letting a multitrillion dollar company get away with such a simple excuse
- coldtea 2y ago>Android manages just fine on that front with full JIT Is this the same Android that has a 5x+ share of malware compared to iOS?
- r0ks0n 2y agohow much of that malware do you think actually uses the jit?
- deleted 2y ago[deleted]
- Zigurd 2y agoI'd be interested to see how much of that malware targets and is effective on big OEMs' devices using Google Mobile Services compared with non-GMS Androids mainly in the China domestic market. In principle the non-GMS devices can be just as secure, but in fact do they give privileged access to vulnerable code?