←back to thread

New Apple security feature reboots iPhones after 3 days, researchers confirm

(techcrunch.com)
286 points joegibbs | 5 comments | 15 Nov 24 01:55 UTC | HN request time: 1.181s | source
Show context
dcow ◴[15 Nov 24 04:42 UTC] No.42144029[source]▶
Why not just go all the way and separate the program instruction memory from the data memory, physically? I know there’s an approximation of this at the page level, but why even let the kernel modify its own memory in the first place? Memory unit that only loads signed pages. etc.
replies(3): >>42144066 #>>42144559 #>>42145502 #
1. saagarjha ◴[15 Nov 24 10:13 UTC] No.42145502[source]▶
This is how iOS works already.
replies(1): >>42156713 #
2. dcow ◴[16 Nov 24 14:52 UTC] No.42156713[source]▶
No it’s not.
replies(1): >>42160391 #
3. saagarjha ◴[16 Nov 24 23:15 UTC] No.42160391[source]▶
Yes it is. The kernel’s code pages are specially marked and cannot be modified once the kernel’s signature is verified and it is mapped in.
replies(1): >>42170198 #
4. dcow ◴[18 Nov 24 06:19 UTC] No.42170198{3}[source]▶
That’s not hardware memory separation.
replies(1): >>42170645 #
5. saagarjha ◴[18 Nov 24 08:08 UTC] No.42170645{4}[source]▶
It’s handled by the memory controller, so…yes it is?