Live data from Hacker News

I hacked macOS

asahilina.net

111–120 of 140 posts

Re: I hacked macOS

#111

Earlier quoted context omitted.

How would you value this exploit, or any exploit?

I understand this is arbitrary code execution with root access. I'm imagining the potential of infecting a high status individual and I think a bad actor would pay millions for such an exploit.

Sure, so how would you arrive at a dollar amount? What would it be?

Re: I hacked macOS

#112

Any suggestions for how I can get to anywhere close to Lina's skills? It's just mad skills.. I don't believe simply putting in huge amount of time in front of the machine is adequate. Neither is simply being smart. Is it just a combination of being smart, sinking in a lot of time, interests etc?

Read computer architecture and computer systems books.

Any suggestions? I'll start with something that might be a good beginner friendly way to get familiar with some of the concepts: 'The Soul of a New Machine' by Tracy Kidder.

Re: I hacked macOS

#113

Earlier quoted context omitted.

[flagged]

> Lina is a pseudonym for Marcan Is there any evidence for this? I've seen a bunch of people say it on HN.

He hasn’t admitted it directly, but there is a large amount of circumstantial evidence. Asahi exclusively uses Marcan’s private infrastructure. They both name their systems after little girls from the anime “PreCure”. They are NEVER talking/streaming at the same moment, even when they appear together. In fact Marcan used to stream quite a bit on his personal channel, but once Asahi appeared he stopped almost entirely. They even have similar typing styles once you start comparing their long-form writings. Not to mention the fact that Asahi’s specialities just so happen to align with Hector’s to the point where they can interchangeably work on reverse engineering Apple Silicon. How many people in the world exist that can do that? And how many would share the exact same interests and peculiarities as Hector?

Finally, and my personal favorite: Asahi’s VTuber reveal was by “hacking” and hijacking one of Marcan’s streams. The introduction was literally replacing Hector.

Re: I hacked macOS

#115
Lina is not a random emerging VTuber who randomly stumbled upon the bug and found an exploit technique that can be applied to exploit the bug; she is actually highly skilled at exploit things...

Re: I hacked macOS

#116
post #30
post #22

Earlier quoted context omitted.

It's clearly a slide deck for a conference presentation or something. So yea, it's terrible for a web page.

I don’t think it’s a presentation. It’s multi dimensional. No one’s navigating multiple dimensions while presenting.

I wish you were right heh

Re: I hacked macOS

#117

Earlier quoted context omitted.

Read computer architecture and computer systems books.

Any suggestions? I'll start with something that might be a good beginner friendly way to get familiar with some of the concepts: 'The Soul of a New Machine' by Tracy Kidder.

You'd be wasting your time with that. Go read the bible (Computer Organization and Design by Patterson) instead.

Re: I hacked macOS

#118

Earlier quoted context omitted.

[flagged]

> Lina is a pseudonym for Marcan Is there any evidence for this? I've seen a bunch of people say it on HN.

The fact that the comment you replied to is buried shows that it's probably too close to be true and makes people uncomfortable. Are we supposed to believe the character is literally an animated humanoid with animal ears? Is it not ok to question who the human entity behind it is? In any case, it's super easy to spot when it's a man pretending to be a woman, in case that's the source of the controversy.

Re: I hacked macOS

#119

Lina is not a random emerging VTuber who randomly stumbled upon the bug and found an exploit technique that can be applied to exploit the bug; she is actually highly skilled at exploit things...

Cool, but this is a technology discussion website, not a personality discussion website.

Re: I hacked macOS

#120
post #68

From code comments, what I understood (most likely in an incorrect way) is: - Use Metal shader code to make process page table accessible to shaders via page protection layer bug exploited using return oriented programming (ROP) - Use Metal shader code to acquire read/write access to physical memory - Use Metal shaders to access the kernel page table - Deals with ASLR to find the kernel base address - Obtains process…

You’re pretty much correct. GPUs are a very interesting attack vector. Especially as more computation is being pushed to GPUs, and they’re not always well isolated.

Do you know what's the original vulnerability that allowed ROP?
Post reply on HN