Software Flashcards

1
Q

ASIF

3 Facts

A

Sparse format
Delta layers
Plugin for Amber

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

AMBER

Definition

A

Apple Modular Block Device Library

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

AEBD

Definition

A

Apple Encrypted Block Device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

KNOX

2 facts

A

Asset database
Fast and secure storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

NBD

Definition

A

Network block device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

FileVault

Definition, Use on ASM

A

Storage encryption with volume key
Class C protection on ASM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Data Protection

Definition

A

File Encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Data Vault

Definition

A

Restrict access to the data of an app from all other requesting apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Sandbox access controls

Definition

A

Restrict what data an app can access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

GCD

definition and description

A

Grand central dispatch
Execute code concurrently on multicore hardware by submitting work to dispatch queues managed by the system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Forward secrecy

Definition

A

Ensures session keys will not be compromised even if long term secrets used in the session key exchange are compromised

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

ARV

Definition

A

Authenticated root volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Evil Maid Attack

Description

A

An attack on an unattended device, in which an attacker alters it in some undetectable way so that they can later access the device, or the data on it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

ABD

description

A

file format for external customers that support AMBER like functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

ACS

Definition

A

Apple Cloud Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

DT

Apple Team

definition, two goals

A

Developer Tools
Planning to use virtual machine to test different OS and Xcode
replace Xcode simulator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

MAC stadium

Purpose

A

Build and run with macOS in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Journaling file system

Description

A

Keep track of uncommitted changes in a data structure to avoid data corruptions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

CAS

Apple Technology

Description

A

Build server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are the two ways to find build records?

A

xbs buildrecords
knox download/extract build-record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

New train names

Apple builds

A

Luck iOS
Cheer macOS
Napili watch
Charisma tv
Wonder Xcode
Discovery vision

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Libkrun

Description

A

Rust based virtual machine monitor that links directly to hypervisor framework

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Orbstack

Purpose

A

Run docker container and Linux on macOS VM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Accelerate framework

Apple Software Stack

Description

A

Make large scale mathematical computations and image calculations using SME and AMX

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

define, who, what

ESP

Networking Technology

A

Encapsulating security payload
Member of IPSec set of protocols
encrypt and authenticate the data packets between computers using a VPN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Description

VMNet

Apple Tech

A

Apple Framework for virtual machines to read and write packets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Description

Stolen time

A

Time that guest is ready to run but not scheduled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Description

Network link conditioner

A

Xcode tool to control bandwidth, latency and packet loss

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Description

VZVirtioSocketDevice

A

A device that manages port-based connections between guest and host

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Four trap controls for performance monitors

ARM

A

ARM PMU register
CPMU, UPMU and CLPC registers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

How CPMU registers are partitioned

ARM

A

Guarded vs unguarded
Host vs guest

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Two functions of PMCR0_EL1

ARM

A

Enabling CPMU counters
Configuring overflow interrupts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Description

Apple framework

A

A bundled shared library (dylib), which contains code and miscellaneous files

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

3 Facts

libSystem

Apple Tech

A

Darwin’s most essential library
Services provided by the lowest level of the C runtime
Wrappers over kernel functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Definition

NMOS

Apple Term

A

Next mainline OS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Description

Linux namespace

A

Partition kernel resources such that a process can only access resources of its namespace

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

3 facts

VirtioFS

A

This uses the FUSE protocol, funnels requests through shared memory, and handles them on macOS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Description

Recap

Apple Tech

A

API and CLI to Synthetically playback events or gestures on a device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

what, how, who

Virtio Net

A

Paravirtualized network device
Use shared memory for data transmission
Adopted in Linux and other operating systems

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

3 Entitlements

Impacts of entitlements on VM ISA

Apple Tech

A

security.hypervisor allows generic ISA
Private.hypervisor.apple - allows Apple ISA
private.hypervisor - allows Apple ISA at least but also internal ISA for
Development kernel, AppleInternal, research guests

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Darwin’s four kernel interfaces

Apple Tech

A

System calls
Mach traps
Machine dependent calls (machdep)
Comm page

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

definition, info, code, management

ACPI

Standard

A

Advanced configuration and power interface
Description of a computer’s configuration and its various components
Associate drivers with its system peripherals
Platform interfaces for power and system management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

definition and four management functions

PSCI

Standard

A

Power state coordination interface
Core idle management
Dynamic addition and removal of cores
secondary core boot
System shutdown and reset

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

4 things defined

SMCCC

ARM

A

Defines a common calling mechanism to be used with SMC and HVC
Defines how registers are used to pass parameters and results
Defines service types
Defines Arm architectural calls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

definition and description

NAT

Networking Tech

A

Network address translation
Map one address space to another by modifying address information in the IP header in transit across a routing device or virtual machine monitor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

definition, what, vm, why

TAP

Linux

A

Terminal access point
Network device mode that allows the creation of a virtual network interface
Support network backend for virtual machines
More performant and capable than SLIRP (user networking)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Description

CentOS

Linux

A

Linux distribution derived from Red Hat Enterprise Linux

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Three VMWare scheduling constraints

A

Shares
Reservation
Limit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Two ways to put expiring workarounds

Apple Tech

A

_CFAppVersionCheckLessThan

dyld_program_sdk_at_least

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Names of 1000 bytes to the power of 1 to 5

A

Kilobytes, megabytes, gigabytes, terabytes, petabytes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Names of 1024 bytes to the power of 1 to 5

A

Kibibytes, Mebibytes, Gibibytes, tebibytes, pebibytes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

what, where and how many

PCIe BAR

Virtio Standard

A

Describe a memory region the CPU accesses to interact with a PCIe device
Defined in configuration space
Each device has 8 functions, and each has 6 BARs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Purpose

Kali Linux

A

Debian based Linux distribution geared toward information security tasks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

definition and description

P2V

A

Physical to virtual
Migration of physical machines to virtual machines

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Description

Libkern

Apple Tech

A

C++ runtime environment in XNU

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

what, find, interface, support

IOKit

Apple Tech

A

Objected oriented kernel drivers
A driver is looked up through IORegistry
Driver properties are provided in IOUserClient
Kernel APIs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

definition and 4 features

APFS

Apple Tech

A

Apple File System
Full 64-bit mode, snapshots, encryption, volume management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

what, why

DMG

Apple Tech

A

Disk image
bundling software distribution into single files and can be mounted as a block device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

description

FSEvent

Apple Tech

A

File system wide notifications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Apple CLI to gather details about every aspect of the system

A

system_profiler

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Apple home applications

A

MacOS: finder
iOS: SpringBoard
TvOS: Pineboard
WatchOS: carousel
AudioOS: soundboard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Apple HID monitor

A

MacOS: WindowServer
Others: backboardd

63
Q

Visible view and user input of MacOS window

A

Visible view: IOSurface
User input: Tactile layer

64
Q

what and how to communicate

VirtioBlk

Standard

A

Simple virtual block device
Communication based on the virtio notification and queues

65
Q

Isochronous transfer in USB

A

Transmit at a constant rate for real time information such as audio and video

66
Q

What, VM consequence

Bridged networking

A

Replicate another node in the physical network
VM will receive its own IP address if DHCP is enabled in the network

67
Q

definition and function

SMBIOS

A

System Management BIOS
Reading management information produced by the BIOS of a computer

68
Q

definition and 2 facts

MDM

A

Mobile device management
Securely and wirelessly configure a device by sending profiles and commands
Administer managed preferences

69
Q

protocol, usage

Apple Open Directory

A

Light weight directory access protocol (LDAP) implementation from Apple
Organize information about a network’s users and resources

70
Q

When isn’t APFS clone used?

A

Copy to a different volume
Copy nested directory

Extra: cp -c

71
Q

Conforms, Integrate

REST API

Standard

A

conforms to the representational state transfer principles
Integrate applications and components in microservices architecture

72
Q

Mediate, continue, narrow

XPC services

Apple Tech

A

mediate access to a shared resource
continue work beyond a client’s lifecycle
narrow the scope of access for different functionality

73
Q

3 Apple service types

A

Launch agent
Launch daemon
XPC service

74
Q

Definition

GPTK

Apple Tech

A

Game porting kit

75
Q

Description

Ray tracing

A

Technique for rendering light transport

76
Q

Symbols, Prove

Turing machine

A

Abstract machine that manipulates symbols on a strip of tape according to a table of rules
Prove properties of computation in general

77
Q

definition and description

IPSW

Apple Tech

A

iPhone software
File format for most Apple firmware

78
Q

Apple three commands to debug memory usage

A

leaks —outputGraph
Footprint
Vmmap

79
Q

Description

Owned unmapped memory

A

Represent memory that your process allocated, shared with another process, unmapped from its own address space but not yet unmapped from the other process address space

80
Q

Definition

SFR

Apple Tech

A

System firmware and recovery

81
Q

Description

EBS

Amazon

A

Block storage service designed for Amazon Elastic Compute Cloud (EC2)

82
Q

Description

BSD interface name

Networking

A

Network driver name followed by a number.
Ex. En0

83
Q

Definition

Thimble

Apple Tech

A

Trusted hybrid inference machine learning

84
Q

definition and description

TCB

Security

A

Trusted computer base
Set of components that collectively enforce the system’s security properties

85
Q

definition and description

Inode

Linux

A

Index node
Data structure that describes a file or directory

86
Q

Description

VHDX

Microsoft

A

Virtual hard disk drive of a virtual machine used by hyper-v

87
Q

Description

Universal binary

Apple Tech

A

Package with one binary for each architecture

88
Q

Apple CLI to see architectures of a universal binary

A

file

89
Q

Apple CLI to see details of a Mach O file

A

otool

90
Q

Definition

WASM

A

Web assembly

91
Q

Description

Shared library cache

Apple Tech

A

Prelink various commonly used Mach O dylibs into one file per architecture

92
Q

What does kevent do?

Apple Tech

A

Block current thread until any of the requested events occur

93
Q

Definition

SPRR

Apple Hardware

A

Shadow permissions remap registers

94
Q

Definition

APRR

Apple Hardware

A

Access permissions remap registers

95
Q

Definition

CTRR

Apple Hardware

A

Configurable text read only region

96
Q

Definition, Description

CDN

Networking

A

Content distribution network
Geographically distributed network of proxy servers and their data centers

97
Q

Definition

UAF

Software Security

A

Use after free

98
Q

Description

Palladium

Hardware Tech

A

In circuit emulation for verification and debug

99
Q

Definition

AMI

Amazon

A

Amazon machine image

100
Q

Description

AWS Nitro

Amazon

A

Combination of dedicated hardware and lightweight hypervisor for running EC2 instances efficiently and securely

101
Q

Definition, Description

VPC

Networking

A

Virtual private cloud
Networking for cloud based resources and services that is global, scalable and flexible

102
Q

Link, Run

Tart VM

3rd Party

A

Link to virtualization framework
Run locally or in the cloud

103
Q

Description, Purpose

AI quantization

A

Convert input values from a large set to output values in a small set
Reduce computation demands of AI models

104
Q

Description

NumPy

Python

A

Python package for scientific computing

105
Q

Two keywords and their meanings

Swift structured concurrency

A

Async to define a method for doing asynchronous work
Await to call an async method

106
Q

Definition, Description

DPDK

Networking

A

Data Plane Development Kit
Open source kit consists of libraries to accelerate data processing workloads running on a wide variety of CPUs.

107
Q

what and why

Apple VideoToolbox

A

Low level framework that provides direct access to hardware encoders and decoders
For video compression and decompression, and for conversion between raster image formats

108
Q

Description

Rasterization

Graphics

A

Converting images in a vector graphics format to raster format used by display monitors

109
Q

Definition, Description

TBB

C++

A

Thread building block
C++ template library from Intel for parallel programming on multi core processors

110
Q

Description

Future

Programming

A

place holder for the result of an asynchronous operation

111
Q

Description

Promise

Programming

A

Set the value of a future once an asynchronous operation is complete

112
Q

Do, Don’t

Pure function

Programming

A

Return the same result given the same argument
Cannot be affected by mutable states or other side effects

113
Q

define, what, why

VFS

File

A

Virtual file system
Standard interface for all file systems
Enable Linux to support large number of file systems

114
Q

define, push, pop

SQ

Apple Software

A

DI2 submission queue
Producer pushes a SQE for a new IO request, which rings the doorbell
Consumer pops a SQE to service the request

115
Q

define, push, pop

CQ

Apple Software

A

DI2 Complete Queue
Push a CQE for a completed IO operation, which may invoke a callback function.
Pop CQE to acknowledge

116
Q

Description

Upward dependency

Programming

A

Two software modules that have link dependencies on each other

117
Q

definition, user perspective, OS perspective

TCC

Apple Software

A

Transparency, consent and control
OS perspective: manager of authorizing system
User perspective: decision input point

118
Q

Definition, Description

ACIO

Apple Tech

A

Apple Converged Input Output
Apple trade-mark for USB 4.0

119
Q

definition, connections, routing

OVS

Networking

A

Open vSwitch
Connecting different VMs and Internet
Route packets from vhost net and NIC

120
Q

2 functions

Libvirt

Linux

A

Translate XML configurations to QEMU CLI calls
Provide admin daemon to manage QMU child processes

121
Q

Description

vhost protocol

Networking

A

Allows the virtio data plane implementation to be offloaded to another element (user process or kernel module) for performance

122
Q

Two meanings

virtio net

Networking

A

Virtio networking device implementation
Guest kernel front end described in the vhost net protocol

123
Q

Definition, Description

DPDK

Networking

A

Data plane development kit
Bypass the kernel networking stack and directly access network devices

124
Q

definition, two functions

AMFI

Apple Software

A

Apple Mobile files integrity
Validate code signatures
Ensure they are signed by a trusted authority

125
Q

Description

ABA problem in concurrency

Programming

A

A value is read is twice and it’s having the same value is used to conclude nothing has happened in the interim

126
Q

what, each letter

REMITS

Security

A

Chain of trust pipeline
Root of trust
Endorsement
Measurement
Identity
Trust
Secrets

127
Q

Definition, Description

TCG

QEMU

A

Tiny Code Generator
Dynamic translation backend that translates guest code to host code

128
Q

what, trust, 3 services

COCONUT SVSM

Linux

A

Secure VM service module
same trust boundary but isolated from guest operating system
vTPM
UEFI variable store
Live migration for CVMs

129
Q

definition, 2 facts

IGVM

Linux

A

Independent guest virtual machine
Encapsulate all the information required to launch a virtual machine on any virtualization stack
Contain measurement

130
Q

define, how, so what

ARC

Apple Programming

A

Automatic reference counting
Retain and release are inserted at compile time
Deallocate objects with zero reference

131
Q

Definition, Description

VPC

Netwoking

A

Virtual private cloud
An isolated and customizable network within a public cloud

132
Q

Description

Syntactic sugar

Programming

A

Programming syntax that’s easier to read and write

133
Q

Description

Mersenne twister

Software

A

Pseudo number generator

134
Q

security, function

Paravisor

A

Executed within the VM but higher privilege than the guest OS
Provide virtualization and device services

135
Q

Description

OpenVMM

A

Modular cross-platform virtual machine monitor written in Rust

136
Q

what, parts, why

OpenHCL

A

Open source paravisor
Consists of OpenVMM, boot loader and Linux kernel
Confidential compute for non enlightened guests

137
Q

6 Steps

Progression of kernel memory corruption exploit

A

vulnerability → constrained memory corruption → strong memory corruption → memory read/write → control flow integrity bypass → arbitrary code execution

138
Q

what, why

Monad

Programming

A

Structure that combines program fragments and wraps their return values in a type with additional computations
Simplifying common operations and abstracting control flows

139
Q

what, who

Hyperlight

Microsoft Tech

A

Open Source Rust library enabling fast and secure execution of small functions using hypervisor based protection
Developed by Microsoft Azure

140
Q

Virtio initialization: Four Status Bits

A

Acknowledge
Driver
Features OK
Driver OK

141
Q

Five parts of virtio device

A

Device status field
Feature bits
Notifications
Device configuration space
At least one virt queues

142
Q

Three virtio notifications

A

Configuration change
Available buffer
Used buffer

143
Q

Three parts of a virtqueue

A

Descriptor area - describe buffers
Driver area - data from driver
Device area - data from device

144
Q

Two virtqueue formats

A

Split
Packed

145
Q

Five steps for a buffer to transfer from driver to device and back on split virtqueue

A

• Driver fills a slot in the descriptor table.
• Driver writes the descriptor index into the available ring.
• Driver sends an available buffer notification.
• Device writes the descriptor index into the used ring.
• Device sends a used buffer notification.

146
Q

Three parts of packed virt queues

A

Descriptor ring
Driver event suppression
Device event suppression

147
Q

Four steps for sending a buffer to a device and back via a packed virtqueue

A
  • Driver writes an available descriptor for the buffer in the descriptor ring.
  • Driver sends an available buffer notification.
  • Device writes a used descriptor in the descriptor ring, thereby overwriting a descriptor previously made available.
  • Device sends an used buffer notification.
148
Q

DD, why

vDSO

Linux

A

Virtual dynamic shared object
Mechanism to export kernel routines to user space
Avoid costs of system calls

149
Q

Definition, description, 3 components

ATS

PCIe

A

Address translation service
Converts device IO address to physical address
Translation agent, address translation page table, address translation cache

150
Q

PCI: PRI: d2

PCIe

A

Page request interface
Sent by an endpoint to request a page be mapped into system memory for an ATS transaction

151
Q

CXL: define, 3 facts

PCIe

A

Compute express link
Open standard interconnect
high speed, high capacity CPU to memory and CPU to device connections
For data center computers

152
Q

SFINAE: d2

Programming

A

Substitution failure is not an error
It’s a powerful technique used in template metaprogramming to enable conditional compilation based on the properties of types.

153
Q

Suppress buddy flow

Apple Software

A

defaults write com.apple.purplebuddy SetupFinishedAllSteps -bool YES