Behind the Scenes of iOS and Mac Security
Explore a comprehensive Black Hat conference talk delving into the intricate security mechanisms of iOS and macOS. Gain insights into the Find My feature's privacy-preserving implementation, including the elliptic curve key diversification system. Discover Gatekeeper improvements in macOS Catalina, user data protections, and solutions to critical challenges like unrestricted direct memory access. Learn about DMA protection for Thunderbolt and PCIe, EFI exploit mitigations, and Mac Secure Boot. Examine the evolution of Kernel Integrity Protection, fast permission restrictions (APRR), and userland integrity safeguards. Understand the Page Protection Layer (PPL) and Pointer Authentication features. Investigate the security and privacy goals of the Find My feature for offline devices. Get information on Apple's iOS Security Research Device program and Security Bounty initiative, aimed at facilitating iOS research and enhancing overall system security.