evacideDec 27, 2023
Security researchers presenting at CCC break down Triangulation, and it’s full of juicy tidbits: https://securelist.com/operation-triangulation-the-last-hardware-mystery/111669/
Operation Triangulation: The last (hardware) mystery

Recent iPhone models have additional hardware-based security protection for sensitive regions of the kernel memory. We discovered that to bypass this hardware-based security protection, the attackers used another hardware feature of Apple-designed SoCs.

Kaspersky
Show threadSpaceLifeFormDec 27, 2023

@evacide

#SiliconTurtles

The big question is: How did the Supply Chain attack get started?

Was it in the Photolithography specs, or did it happen on the backend at the fab?

Show threadKevin RiggleDec 28, 2023
@SpaceLifeForm @evacide Why should an adversary bother to do a supply chain attack when every vendor introduces more than enough of these bugs for free?
Show threadSpaceLifeFormDec 28, 2023

@kevinriggle @evacide

Persistence. Also there are no binaries to be reversed engineered over releases to discover non-revealed zero-days.

Is there any reason to believe that this exploit chain is the only one using this hardware mis-feature?

I would not bet on that being the case.

Show threadKevin RiggleDec 28, 2023
@SpaceLifeForm lolllllllll darling
Show threadKevin RiggleDec 28, 2023
@SpaceLifeForm it literally doesn’t give them persistence. They have to reinfect after every reboot
Show threadSpaceLifeFormDec 28, 2023

@kevinriggle

Pulls battery.

Oh. Nevermind. /s

Show threadKevin Riggle
@SpaceLifeForm you don’t have to, literally just power cycling is enough! Though if you want to that obviously works too
Dec 29, 2023 at 12:30pmWeb