Gwynne Raskind on Twitter: "@landonfuller @mjtsai Use of the existing options for this kind of control would keep them from being able to bypass it for themselves."

Country	Code	For customers of
United States	40404	(any)
Canada	21212	(any)
United Kingdom	86444	Vodafone, Orange, 3, O2
Brazil	40404	Nextel, TIM
Haiti	40404	Digicel, Voila
Ireland	51210	Vodafone, O2
India	53000	Bharti Airtel, Videocon, Reliance
Indonesia	89887	AXIS, 3, Telkomsel, Indosat, XL Axiata
Italy	4880804	Wind
3424486444	Vodafone
» See SMS short codes for other countries

Michael Tsai ‏@mjtsai 12 Jul 2015

@ameaijou So the difference is just who is allowed to set the flag/xattr?
Gwynne Raskind ‏@ameaijou 12 Jul 2015

@mjtsai Yeah. chflags() can only unset SF_* in single-user mode, whereas the EA appears to be gated by entitlements. The result is the same.
Landon Fuller ‏@landonfuller 12 Jul 2015

@ameaijou @mjtsai Real difference is unrelated to security: EA is tied to Apple's code signing approval rather than local admin control.
Gwynne Raskind ‏@ameaijou 12 Jul 2015

@landonfuller @mjtsai That’s what inspired a new impl in the first place: Local admin control is assumed to be too stupid to be safe.
Gwynne Raskind ‏@ameaijou 12 Jul 2015

@landonfuller @mjtsai Unfortunately, in a lot of cases it’s a legit assumption. Many users don’t know what an admin password even is.
Gwynne Raskind ‏@ameaijou 12 Jul 2015

@landonfuller @mjtsai That being said, those same users have no clue how to go to single-user mode so...
Landon Fuller ‏@landonfuller 12 Jul 2015

@ameaijou @mjtsai kern.securelevel solves that problem. On (all?) BSD-derivatives, increasing securelevel is a one-way street till reboot.
Gwynne Raskind ‏@ameaijou 12 Jul 2015

@landonfuller @mjtsai I actually think it’d be much harder to social-engineer users into turning off SF_IMMUTABLE than into booting Recovery
1 like
Landon Fuller ‏@landonfuller 12 Jul 2015

@ameaijou @mjtsai Agreed. Enforcement is always on, securelevel just makes it possible to unset. TrustedBSD (on which Apple's stuff is…[1/2]
Landon Fuller ‏@landonfuller 12 Jul 2015

@ameaijou @mjtsai …based) gives us fine-grained MAC, but it's SPI, and rootless' use of entitlements enforces a very static Apple-only model

‏@ameaijou

@landonfuller @mjtsai Use of the existing options for this kind of control would keep them from being able to bypass it for themselves.

12:36 PM - 12 Jul 2015

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

Gwynne Raskind

@ameaijou

Loading seems to be taking a while.

false

Saved searches

Gwynne Raskind

@ameaijou

Go to a person's profile

Saved searches

Retweet this to your followers?

Saved searches

Are you sure you want to delete this Tweet?

Promote this Tweet

Block

Add a location to your Tweets

Profile summary

Your lists

Create a new list

Copy link to Tweet

Embed this Tweet

Embed this Video

Preview

Log in to Twitter

Sign up for Twitter

Not on Twitter? Sign up, tune into the things you care about, and get updates as they happen.

Two-way (sending and receiving) short codes:

Confirmation

Buy Now

Hmm... Something went wrong. Please try again.

Welcome home!

Tweets not working for you?

Say a lot with a little

Spread the word

Join the conversation

Learn the latest

Get more of what you love

Find what's happening

Never miss a Moment

Loading seems to be taking a while.

Promoted Tweet

false