Elektrine lite

← Feed

Allison Husain

ezhes_@mastodon.online

<p>&quot;if i had a nickel for every time i accidentally found a zero click RCE, i&#39;d have two nickels, which isn&#39;t a lot but it&#39;s weird that it happened twice&quot; 
she/her</p>

Posts

  • Post #2509610

    Memory Integrity Enforcement is the culmination of a truly incredible amount of work :) While there&amp;#39;s so much to love, one of my favorite pieces was getting to bring kalloc_type-style isolation to out-of-bounds accesses on both the architectural and speculative path. This lets us both mitigate a variety of Spectre v1 style attacks and break the reliable exploitation of some of the most powerful first-order memory corruption primitives (arb offset OOB R/W). https://security.apple.com/bl...