Michael Tsai on Twitter: "@landonfuller @ameaijou Was it because of the code or because they were not honest when applying for the cert?"

Country	Code	For customers of
United States	40404	(any)
Canada	21212	(any)
United Kingdom	86444	Vodafone, Orange, 3, O2
Brazil	40404	Nextel, TIM
Haiti	40404	Digicel, Voila
Ireland	51210	Vodafone, O2
India	53000	Bharti Airtel, Videocon, Reliance
Indonesia	89887	AXIS, 3, Telkomsel, Indosat, XL Axiata
Italy	4880804	Wind
3424486444	Vodafone
» See SMS short codes for other countries

Michael Tsai ‏@mjtsai Feb 28

Apple Blacklists Own Ethernet Driver: http://mjtsai.com/blog/2016/02/28/apple-blacklists-own-ethernet-driver/ … #mjtsaiblog
5 retweets 1 like
Landon Fuller ‏@landonfuller Feb 28

@mjtsai Presumably intended for >= 10.11.4, where Yukon2/BCM driver updates appear to fix local vulnerabilities in IOUserClient interface.
1 retweet
Landon Fuller ‏@landonfuller Feb 28

@mjtsai Dockmod seems have shipped a valid signed kext that allowed root to bypass SIP and inject code into processes (like the Dock).
Landon Fuller ‏@landonfuller Feb 28

@mjtsai That seems to have resulted in getting their signing cert revoked, and a blacklist entry added for their existing kext.
Gwynne Raskind ‏@ameaijou Feb 28

@landonfuller @mjtsai Good call IMO. Injecting userland code into Apple-owned processes from kernelspace is a rather horrid security fail.
Landon Fuller ‏@landonfuller Feb 28

@ameaijou @mjtsai I agree; I've got no love SIP, but from what I saw in IDA, that was was __way__ too hoary to be sitting in the kernel.
Landon Fuller ‏@landonfuller Feb 28

@ameaijou @mjtsai er, that implementation was too hoary, and warranted blacklisting. Uncomfortable with the total cert revoke, though.
Gwynne Raskind ‏@ameaijou Feb 28

@landonfuller @mjtsai Slightly disagree. IMO bad code in kernelspace should be strongly discouraged regardless of issues with SIP etc.
Landon Fuller ‏@landonfuller Feb 28

@ameaijou @mjtsai I'm just wary of locking people out of the kernel forever because of bad (not malicious) code.
1 like

‏@mjtsai

@landonfuller @ameaijou Was it because of the code or because they were not honest when applying for the cert?

5:00 PM - 28 Feb 2016

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

Michael TsaiVerified account

@mjtsai

Loading seems to be taking a while.

false

Saved searches

Michael TsaiVerified account

@mjtsai

Go to a person's profile

Saved searches

Retweet this to your followers?

Saved searches

Are you sure you want to delete this Tweet?

Promote this Tweet

Block

Add a location to your Tweets

Profile summary

Your lists

Create a new list

Copy link to Tweet

Embed this Tweet

Embed this Video

Preview

Log in to Twitter

Sign up for Twitter

Not on Twitter? Sign up, tune into the things you care about, and get updates as they happen.

Two-way (sending and receiving) short codes:

Confirmation

Buy Now

Hmm... Something went wrong. Please try again.

Welcome home!

Tweets not working for you?

Say a lot with a little

Spread the word

Join the conversation

Learn the latest

Get more of what you love

Find what's happening

Never miss a Moment

Loading seems to be taking a while.

Promoted Tweet

false