New blogpost! I put together a thorough survey of security mitigations and architectures from the past few years.
Hardware solutions, software mitigations, and safe languages. CHERI, MTE, Rust, Swift, kalloc_type, Firebloom, GuardedMemcpy, CastGuard, and more! https://saaramar.github.io/memory_safety_blogpost_2022/
“I’ve never seen anything like this in my more than 20 years in Congress.”
—George Santos
Another cool change in kalloc (you can see it in the iOS 16 / macOS 13 OSS drop) is packed kalloc array type.
The comments describe the security value nicely: "embedding lengths inside the allocation is self-referential and an appetizing target for post-exploitation strategies"
One of the best encryption discussions I've heard in a long time.
Today on the Lawfare Podcast, @[email protected] talks with @[email protected] about Apple's new security features for iPhone and how it plays into the broader Crypto Wars.
On Youtube with auto-captions:
https://www.youtube.com/watch?v=mabjDIs5LOI
🐦🔗: https://twitter.com/lawfareblog/status/1603067283848536064