Software Flashcards
ASIF
3 Facts
Sparse format
Delta layers
Plugin for Amber
AMBER
Definition
Apple Modular Block Device Library
AEBD
Definition
Apple Encrypted Block Device
KNOX
2 facts
Asset database
Fast and secure storage
NBD
Definition
Network block device
FileVault
Definition, Use on ASM
Storage encryption with volume key
Class C protection on ASM
Data Protection
Definition
File Encryption
Data Vault
Definition
Restrict access to the data of an app from all other requesting apps
Sandbox access controls
Definition
Restrict what data an app can access
GCD
definition and description
Grand central dispatch
Execute code concurrently on multicore hardware by submitting work to dispatch queues managed by the system
Forward secrecy
Definition
Ensures session keys will not be compromised even if long term secrets used in the session key exchange are compromised
ARV
Definition
Authenticated root volume
Evil Maid Attack
Description
An attack on an unattended device, in which an attacker alters it in some undetectable way so that they can later access the device, or the data on it.
ABD
description
file format for external customers that support AMBER like functions
ACS
Definition
Apple Cloud Service
DT
Apple Team
definition, two goals
Developer Tools
Planning to use virtual machine to test different OS and Xcode
replace Xcode simulator
MAC stadium
Purpose
Build and run with macOS in the cloud
Journaling file system
Description
Keep track of uncommitted changes in a data structure to avoid data corruptions
CAS
Apple Technology
Description
Build server
What are the two ways to find build records?
xbs buildrecords
knox download/extract build-record
New train names
Apple builds
Luck iOS
Cheer macOS
Napili watch
Charisma tv
Wonder Xcode
Discovery vision
Libkrun
Description
Rust based virtual machine monitor that links directly to hypervisor framework
Orbstack
Purpose
Run docker container and Linux on macOS VM
Accelerate framework
Apple Software Stack
Description
Make large scale mathematical computations and image calculations using SME and AMX
define, who, what
ESP
Networking Technology
Encapsulating security payload
Member of IPSec set of protocols
encrypt and authenticate the data packets between computers using a VPN
Description
VMNet
Apple Tech
Apple Framework for virtual machines to read and write packets
Description
Stolen time
Time that guest is ready to run but not scheduled
Description
Network link conditioner
Xcode tool to control bandwidth, latency and packet loss
Description
VZVirtioSocketDevice
A device that manages port-based connections between guest and host
Four trap controls for performance monitors
ARM
ARM PMU register
CPMU, UPMU and CLPC registers
How CPMU registers are partitioned
ARM
Guarded vs unguarded
Host vs guest
Two functions of PMCR0_EL1
ARM
Enabling CPMU counters
Configuring overflow interrupts
Description
Apple framework
A bundled shared library (dylib), which contains code and miscellaneous files
3 Facts
libSystem
Apple Tech
Darwin’s most essential library
Services provided by the lowest level of the C runtime
Wrappers over kernel functions
Definition
NMOS
Apple Term
Next mainline OS
Description
Linux namespace
Partition kernel resources such that a process can only access resources of its namespace
3 facts
VirtioFS
This uses the FUSE protocol, funnels requests through shared memory, and handles them on macOS
Description
Recap
Apple Tech
API and CLI to Synthetically playback events or gestures on a device
what, how, who
Virtio Net
Paravirtualized network device
Use shared memory for data transmission
Adopted in Linux and other operating systems
3 Entitlements
Impacts of entitlements on VM ISA
Apple Tech
security.hypervisor allows generic ISA
Private.hypervisor.apple - allows Apple ISA
private.hypervisor - allows Apple ISA at least but also internal ISA for
Development kernel, AppleInternal, research guests
Darwin’s four kernel interfaces
Apple Tech
System calls
Mach traps
Machine dependent calls (machdep)
Comm page
definition, info, code, management
ACPI
Standard
Advanced configuration and power interface
Description of a computer’s configuration and its various components
Associate drivers with its system peripherals
Platform interfaces for power and system management
definition and four management functions
PSCI
Standard
Power state coordination interface
Core idle management
Dynamic addition and removal of cores
secondary core boot
System shutdown and reset
4 things defined
SMCCC
ARM
Defines a common calling mechanism to be used with SMC and HVC
Defines how registers are used to pass parameters and results
Defines service types
Defines Arm architectural calls
definition and description
NAT
Networking Tech
Network address translation
Map one address space to another by modifying address information in the IP header in transit across a routing device or virtual machine monitor
definition, what, vm, why
TAP
Linux
Terminal access point
Network device mode that allows the creation of a virtual network interface
Support network backend for virtual machines
More performant and capable than SLIRP (user networking)
Description
CentOS
Linux
Linux distribution derived from Red Hat Enterprise Linux
Three VMWare scheduling constraints
Shares
Reservation
Limit
Two ways to put expiring workarounds
Apple Tech
_CFAppVersionCheckLessThan
dyld_program_sdk_at_least
Names of 1000 bytes to the power of 1 to 5
Kilobytes, megabytes, gigabytes, terabytes, petabytes
Names of 1024 bytes to the power of 1 to 5
Kibibytes, Mebibytes, Gibibytes, tebibytes, pebibytes
what, where and how many
PCIe BAR
Virtio Standard
Describe a memory region the CPU accesses to interact with a PCIe device
Defined in configuration space
Each device has 8 functions, and each has 6 BARs
Purpose
Kali Linux
Debian based Linux distribution geared toward information security tasks
definition and description
P2V
Physical to virtual
Migration of physical machines to virtual machines
Description
Libkern
Apple Tech
C++ runtime environment in XNU
what, find, interface, support
IOKit
Apple Tech
Objected oriented kernel drivers
A driver is looked up through IORegistry
Driver properties are provided in IOUserClient
Kernel APIs
definition and 4 features
APFS
Apple Tech
Apple File System
Full 64-bit mode, snapshots, encryption, volume management
what, why
DMG
Apple Tech
Disk image
bundling software distribution into single files and can be mounted as a block device
description
FSEvent
Apple Tech
File system wide notifications
Apple CLI to gather details about every aspect of the system
system_profiler
Apple home applications
MacOS: finder
iOS: SpringBoard
TvOS: Pineboard
WatchOS: carousel
AudioOS: soundboard