[HN Gopher] Modern iOS Security Features - A Deep Dive into SPTM...
___________________________________________________________________
Modern iOS Security Features - A Deep Dive into SPTM, TXM, and
Exclaves
Author : todsacerdoti
Score : 63 points
Date : 2025-10-13 18:23 UTC (4 hours ago)
(HTM) web link (arxiv.org)
(TXT) w3m dump (arxiv.org)
| Moral_ wrote:
| SEAR and the Apple team does an excellent job of security on iOS,
| and should be commended greatly on that.
|
| Not only are they willing to develop hardware features and plumb
| that throughout the entire stack, they're willing to look at ITW
| exploits and work on ways to mitigate that. PPL was super
| interesting, they decided it wasn't 100% effective so they
| ditched it and came up with other thigs.
|
| Apple's vertical makes it 'easy' to do this compared to Android
| where they have to convince the CPU guys at QC or Mediatek to
| build a feature, convince the linux kernel to take it, get it in
| AOSP, get it in upstream LLVM, etc etc.
|
| Pointer authentication codes (PAC) is a good example, Apple said
| f-it we'll do it ourselves. They maintained a downstream fork of
| LLVM, and built full support, leveraged in the wild bypasses and
| fixed those up.
___________________________________________________________________
(page generated 2025-10-13 23:00 UTC)