5 ms·
So it probably also affects Android phones and SBC like RaspberryPi's?
by darkclouds 3y ago
So it probably also affects Android phones and SBC like RaspberryPi's?
- comex 3y agoThe bypass is Apple-specific… which it must be, because the security feature being bypassed, CTRR, is itself Apple-specific. I don’t think Android phones or Raspberry Pi even have any equivalent.
- ajross 3y agoNo, this is all Apple hardware. Other SOCs often have equivalent features and might plausibly make the same mistake (which per the Hector Martin toot is effectively "the write back cache doesn't check security access control so you can stuff data into it to be snooped by other devices"). But this bug is Apple-only.
- DannyBee 3y agoThis only works at all because there is no IOMMU for the GPU. So they'd also have to decide not to do that as well.
- ajross 3y agoYeah, but lots and lots of hardware lives across a bus without an IOMMU. Until very recently, that was the natural state of things. To me what's notable here is that they have a snoopable cache across a security boundary, where you can get the IO device to read arbitrary data you stuffed in from the CPU, when the CPU can't actually touch the underlying storage being cached!
- darkclouds 3y ago[dead]