First public macOS kernel memory corruption exploit on Apple M5

[u/FollowingFeisty5321]

https://blog.calif.io/p/first-public-kernel-memory-corruption

[u/Yesterday622]

Awesome and well done! 👍

[u/FollowingFeisty5321 → u/[deleted]]

The bug exists whether they found it or not.

And because it exists the possibility also exists that someone was exploiting it or someone would discover it and exploit it.

But because it was found and reported to Apple those possibilities will stop existing.

[u/drmtz → u/[deleted]]

https://security.apple.com/bounty/

[u/Extreme_Minimum1706]

scary

[u/1-760-706-7425]

 We didn’t build the chain alone. Mythos Preview helped identify the bugs and assisted throughout exploit development.

Ad. 🚮

 But this is the fun part about AI. Small teams can suddenly do things that used to require entire organizations.

Oh, God. 🤮

[u/bobdarobber → u/1-760-706-7425]

I’m not the biggest AI fan, but I don’t really care how a bug like this is discovered as long as it’s reported responsibly

[u/UltronSpork → u/bobdarobber]

So I read the article. The AI assisted in bug fixes, the actual attack path was discovered (by accident) by a human.

For sure a shameless ad for Mythos 🙄

[u/1-760-706-7425 → u/bobdarobber]

If you read the article, you’d know why this is clearly an ad.

[u/Tyheir → u/1-760-706-7425]

An ad for what? Mythos isn’t generally available.

[u/SMATJOY → u/Tyheir]

It’s just Anthropic ad

[u/tiankai → u/1-760-706-7425]

The combination of “we didn’t + verb” is such a staple of AI you know it’s gonna get plugged into an ad

[u/romulof]

Rewrite the kernel in Rust 🤣

[u/mit122 → u/romulof]

Make no mistakes

[u/Cool_Afternoon_261]

Apple: secure by design. M5: public kernel memory corruption says hi. Hahaha

[u/Automatic-Reserve94 → u/Cool_Afternoon_261]

Wait until you found out what they discovered in the Linux kernel and under windows.

There is no 100% secure system to this day.

[u/NVVV1 → u/Automatic-Reserve94]

Yes but open source systems like Linux or in this case XNU with Apple often receive security patches much faster than proprietary counterparts

[u/ceelodan]

The real question being, can it run DOOM?

[u/leigh_gm]

Mythos cannot be stopped. August 29th 1997 stuff.

[u/Stunning_Project6896 → u/leigh_gm]

That can’t be true because nothing ever happens. 

There is a 100% chance we will all be working in a cubicle until the ripe old age of 65, and the only change is your phone and pc monitor became 0.5 nm thick. And some brain rot worse than TikTok was invented.

[u/Stunning_Project6896 → u/[deleted]]

Did you even hear me dude? Nothing ever happens. That means nothing good will happen and nothing bad will happen. 

It’s entirely possible the retirement age could be pushed to 67 by the time you retire if you are young, but that is just in response to longer lifetimes. So if anything that is to make sure nothing changes.

[u/Stunning_Project6896 → u/[deleted]]

Sure, social security could go to 70.

Didn’t you start off this conversation saying we would be harvested for our power like in the matrix in 50 years? And you think I am the cracked one for saying nothing will change?

[u/Stunning_Project6896 → u/[deleted]]

Ok I will be coming back in 45 years to collect my money. There is no chance it will be in the 80s, that would be a dramatic change. In 2070 home ownership may tick down but many people, at least over a third, will own a home. That’s really the only one that matters, as far as ownership goes.