yawnbox :softboy_pride:🔜40C3 on Nostr: Another important takeaway with Apple’s lead in rolling out superior exploit ...

Another important takeaway with Apple’s lead in rolling out superior exploit mitigations on mass-market devices is that 0day attack chains will become harder, more expensive, and for some, impossible. This raises the bar for everyone’s security, even if you don’t use an Apple device, in multiple ways. But the important point here is that the kernel will become hardware to hit, and attacking 3rd-party apps directly, ones that are remotely addressable, will go up, making it even more important for 3rd party apps to be paying attention and to enable MIE/MTE features ASAP.

Once app makers are doing this for one type of device, it will make it easier and cheaper to do it again on another device, once more devices support hardware MTE, and once operating system owners enable block-mode/synchronous-MTE by default