91–100 of 233 posts
I wonder if it's possible for app devs to use Exclaves. The thing that irks me about Apple is that they invent this new amazing internal stuff but then completely wall it off from devs, leaving everyone else (banking apps, wallets, secure messaging, etc.) to continue running in unsecured user space.
Earlier quoted context omitted.
How so? Isn’t this just the xkcd authorization model? https://xkcd.com/1200/ I tried to read the article, and know what all the words mean (sel4, enclaves, virtualization primitives, etc.). It all seems very complicated and error prone, but I couldn’t figure out what the attack model is, or what the security objectives are. Eg, what sorts of things run in exclaves, and under what circumstances will a persistent kerne…
Delegating key derivation and/or password validation, combined with secure UI state indication, to a more secure execution environment can be a big win for security, for example. I could imagine a passkey implementation with some extensions that allow securely presenting what the user is consenting to and how ("enter your payments PIN or password now to confirm a payment of $x to merchant y"). It's of course even bet…
I wonder if it's possible for app devs to use Exclaves. The thing that irks me about Apple is that they invent this new amazing internal stuff but then completely wall it off from devs, leaving everyone else (banking apps, wallets, secure messaging, etc.) to continue running in unsecured user space.
They are also kernel-to-kernel currently, so third party support would likely be limited to implementing things like secure device drivers. However, Apple has been trying to push third party drivers to user space, not to the hypervisor. Based on that migration happening in parallel with this development, I do not suspect they plan to pivot and have third party driver developers use exclaves.
It is pretty common for Apple to do significantly more stabilization of kernel-imposed platform features like this internally before exposing to third parties (see also pointer authentication a la arm64e).
Earlier quoted context omitted.
He's definitely misunderstood. If you read his biography it's incredible how much the author of it misunderstands, but if you read between the lines you can see through them. In particular you should note how he changes before and after getting married. The biography is really awful though. It constantly misquotes people - Bill Gates is directly quoted as saying something so technically inaccurate he can't possibly h…
I don’t remember many details from the biography at this point, but I remember not liking it either. It seemed like it was written with the assumption the reader already knew the about Steve’s more public life and career, and skipped over much of it. It didn’t feel like it would be a good source for future generations to learn about Steve, as it seemed to largely ignore the entire reason a book was being written abou…
It definitely was, but at least parts of that must have been warranted given Jobs refused to read it, saying something along the lines of "I know I wouldn’t like what it says"
Earlier quoted context omitted.
Now that I'm becoming an old man, I've taken the time to go back and listen to him properly, to analize his thoughts and words a bit more contextually, and I've come to believe that Steve Jobs was quite misunderstood, both by us, and by himself. When I miss him I think: his thoughts were so very refined for his time, it is quite incredible and I wish he was around to hear more of them. I guess I'm a fan? Oh well...wo…
I still think about how he tried to cure cancer with crystals and then when that didn’t work he used his wealth to get residency in a different state to jump in line for a transplant and still died before his yacht got completed. I don’t misunderstand him at all. Especially the parking in handicap spaces part. Very easy to understand what kind of person he was through his actions. Perhaps we will never see eye to eye…
Earlier quoted context omitted.
You know that's still bad right?
Why do you only pay the minimum amount of tax?
You didn’t pose the question to me. And yet.
Very many people don’t. We know there are constructs that would enable us to pay less, yet we choose to not pursue them. We are part of a society that enables us to be what we are, why should we strive to give as little as possible in return?
(And yes, we also don’t send extra money. This is not a contradiction.)