aunali1

5 ms·

1.
What’s the Smallest Variety of CHERI?(msrc-blog.microsoft.com)
1 points by aunali1 4y ago|0 comments
2.
Disguised “AMD PCI Driver” enables executable-specific hacks(twitter.com)
147 points by aunali1 5y ago|38 comments
3.
C++ vs. Ada in Safety Critical Software(craftofcoding.wordpress.com)
3 points by aunali1 5y ago|1 comments
4.
ACE: Apple Type-C Port Controller Secrets(blog.t8012.dev)
277 points by aunali1 6y ago|125 comments
5.
by aunali1 6y ago
Unfortunately, this is not the complete picture. The T2 simply programs the embedded flash within the PCH over an eSPI interface. Meaning, a successful reprogram from the T2 WILL persist until the following occurs: - A T2 Restore - A macOS
6.
by aunali1 6y ago
> Selling a device to automagically hack a key logger into a modern Mac goes over their ‘line in the sand’, No, there is a clear distinction between what is being sold and what is being demonstrated. The latter requires additional hardwa
7.
Netflix 4K UHD Streaming requires Apple's T2 chip(iphoneincanada.ca)
4 points by aunali1 6y ago|0 comments
8.
by aunali1 6y ago
I would say it is persistent enough to be malicious. The T2 does not reboot, with the exception occuring during a DFU restore, extremely drained battery, or firmware update. With that in mind, a party intending harm would have more than en
9.
by aunali1 6y ago
Mostly synthetics and some program compilation (configure+make) tests. Yes, it is passively cooled. To clarify, it does not match the host Intel CPU (i7-8750H @ 2.2GHz) but in some synthetics, i.e. Coremark, the T2 does come close. I would
10.
by aunali1 6y ago
Yep, it involves the same techniques used for iDevices but with less steps. I won't go into details here for obvious reasons.
11.
by aunali1 6y ago
Unfortunately, physically obstructing the primary port would not completely prevent DFU from being accessed. With the aforementioned accessory device, the ACE Type-C controllers within Macs can automatically reroute the DFU, DCI, and PCH&#x
12.
by aunali1 6y ago
The T2 was more or less a stopgap solution between their current Intel-based offerings and the AppleSilicon devices in regards to their security aspirations. My understanding is that there will be no T3, as evidenced in the DTK, which makes
13.
by aunali1 6y ago
Hi guys, I am part of the team working on all things T2. [1] The checkra1n support is just in a PoC state, it will successfully exploit and boot the T2. The payload support is partially broken, but being worked on. Additionally, we have SSH