Hacker News Reader

Full thread

Whitespace

Absolutely phenomenal hack. This is state-actor-level stuff.

I'm no expert, but iPhone might also use essentially the same ARM TrustZone/SecurCore tech as per [0].

If that's the case I wouldn't be surprised if we saw the same group targeting iPhones in a couple of months.

[0] https://en.wikipedia.org/wiki/Apple_A7

View on HN

The prerequisite for mounting this attack is kernel code execution already [0]:

> We show that a malicious kernel driver ...

As per [1] the Power management unit is shared between the Application Processor (AP) and the Secure Enclave Processor (SEP) so this attack might work against iPhones as well.

[0] https://www.usenix.org/conference/usenixsecurity17/technical... [1] https://www.blackhat.com/docs/us-16/materials/us-16-Mandt-De...

I could be wrong, but I don't think sandboxed apps on iOS can control the CPU frequency/voltage like this.

Reply on news.ycombinator.com