stek29.rocks

Intro This post contains the original report as sent to Apple Security with slight redactions for clarity.

ONYX and KOReader intro I recently got an ONYX Boox Poke6 – an 6-inch Android-based e-ink reader.

UPDATE 2024-04-13: CVE-2019-8569 was assigned to this vulnerability Duo Labs have recently published another post in their series on T2 coprocessor/iBridge.

Requiring privileges Some kernel APIs should be restricted only to “special” binaries/users.

Intro I was looking through my VimWiki KB when moving to Notion, and I’ve found these drafts/notes which might be useful to me (or someone else) some day, so I want to make them public.

So, recently I’ve realized that meaning of “lock/unlock” in context of nvram on iOS is not understood correctly by many, so I’ve decieded to make a quick blog post on meaning of those words.

Saved from my answer on CodeGolf StackExchange Smallest runnable Mach-O has to be at least 0x1000 bytes.

Sandbox’s MACF label slot is a struct “sandbox” its slot is 1, and it’s not always present #define EXT_TABLE_SIZE 9 struct sandbox { /* 0x00 */ void* profile; /* 0x08 */ extension_hdr_t ext_table[EXT_TABLE_SIZE]; // zeroed on create /* 0x58 */ lck_rw_t e…

Remounting root as RW on iOS Obvioulsy, rootfs is mounted as readonly on iOS To remount it as RW, an update mount can be made.

Before you start Maybe your offsets are already in this gist.