Software Flashcards

1
Q

ASIF

A

Sparse format
Delta layers
Plugin for Amber

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

AMBER

A

Apple Modular Block Device Library

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

AEBD

A

Apple Encrypted Block Device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

KNOX

A

Asset database
Fast and secure storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

NBD

A

Network block device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

FileVault

A

Storage encryption with volume key (class C protection on ASM)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Data Protection

A

File Encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Data Vault

A

Restrict access to the data of an app from all other requesting apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Sandbox access controls

A

Restrict what data an app can access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

GCD: definition and description

A

Grand central dispatch
Execute code concurrently on multicore hardware by submitting work to dispatch queues managed by the system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Forward secrecy

A

Ensures session keys will not be compromised even if long term secrets used in the session key exchange are compromised

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

ARV

A

Authenticated root volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Evil Maid Attack

A

An attack on an unattended device, in which an attacker alters it in some undetectable way so that they can later access the device, or the data on it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

ABD: description

A

file format for external customers that support AMBER like functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

ACS

A

Apple Cloud Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

DT: definition and two goals

A

Developer Tools
Planning to use virtual machine to test different OS and Xcode
replace Xcode simulator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

MAC stadium

A

Build and run with macOS in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Journaling file system

A

Keep track of uncommitted changes in a data structure to avoid data corruptions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

CAS

A

Build server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are the two ways to find build records?

A

xbs buildrecords
knox download/extract build-record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

New train names

A

Luck iOS
Cheer macOS
Napili watch
Charisma tv
Wonder Xcode
Discovery vision

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Libkrun

A

Rust based virtual machine monitor that links directly to hypervisor framework

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Orbstack

A

Run docker container and Linux on macOS VM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Accelerate framework

A

Make large scale mathematical computations and image calculations using SME and AMX

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Gray matter

A

Apple intelligence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Networking: ESP: define, who, what

A

Encapsulating security payload
Member of IPSec set of protocols
encrypt and authenticate the data packets between computers using a VPN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

VMNet

A

Apple Framework for virtual machines to read and write packets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Stolen time

A

Time that guest is ready to run but not scheduled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Network link conditioner

A

Xcode tool to control bandwidth, latency and packet loss

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

VZVirtioSocketDevice

A

A device that manages port-based connections between guest and host

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Four trap controls for performance monitors

A

ARM PMU register
CPMU, UPMU and CLPC registers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

How CPMU registers are partitioned

A

Guarded vs unguarded
Host vs guest

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Two functions of PMCR0_EL1

A

Enabling CPMU counters
Configuring overflow interrupts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Apple framework

A

A bundled shared library (dylib), which contains code and miscellaneous files

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

libSystem: 3 facts

A

Darwin’s most essential library
Services provided by the lowest level of the C runtime
Wrappers over kernel functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

NMOS

A

Next mainline OS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Linux namespace

A

Partition kernel resources such that one set of processes sees one set of resources, while another set of processes sees a different set of resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

VirtioFS: 3 facts

A

This uses the FUSE protocol, funnels requests through shared memory, and handles them on macOS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Recap

A

API and CLI to Synthetically playback events or gestures on a device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Virtio Net: what, how, who

A

Paravirtualized network device
Use shared memory for data transmission
Adopted in Linux and other operating systems

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Impacts of entitlements on VM ISA

A

security.hypervisor allows generic ISA
Private.hypervisor.apple - allows Apple ISA
private.hypervisor - allows Apple ISA at least but also internal ISA for
Development kernel, AppleInternal, research guests

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Darwin’s four kernel interfaces

A

System calls
Mach traps
Machine dependent calls (machdep)
Comm page

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

ACPI: definition, info, code, management

A

Advanced configuration and power interface
Description of a computer’s configuration and its various components
Associate drivers with its system peripherals
Platform interfaces for power and system management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

PSCI: definition and four management functions

A

Power state coordination interface
Core idle management
Dynamic addition and removal of cores
secondary core boot
System shutdown and reset

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

SMCCC: 4 things being defined

A

Defines a common calling mechanism to be used with SMC and HVC
Defines how registers are used to pass parameters and results
Defines service types
Defines Arm architectural calls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

NAT: definition and description

A

Network address translation
Map one address space to another by modifying address information in the IP header in transit across a routing device or virtual machine monitor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

TAP in Linux: definition, what, vm, why

A

Terminal access point
Network device mode that allows the creation of a virtual network interface
Support network backend for virtual machines
More performant and capable than SLIRP (user networking)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

CentOS: one liner

A

Linux distribution derived from Red Hat Enterprise Linux

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Three VMWare scheduling constraints

A

Shares
Reservation
Limit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Two ways to put expiring workarounds

A

_CFAppVersionCheckLessThan

dyld_program_sdk_at_least

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Names of 1000 bytes to the power of 1 to 5

A

Kilobytes, megabytes, gigabytes, terabytes, petabytes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Names of 1024 bytes to the power of 1 to 5

A

Kibibytes, Mebibytes, Gibibytes, tebibytes, pebibytes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

PCIe BAR: what, where and how many

A

Describe a memory region the CPU accesses to interact with a PCIe device
Defined in configuration space
Each device has 8 functions, and each has 6 BARs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Kali Linux

A

Debian based Linux distribution geared toward information security tasks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

P2V: definition and description

A

Physical to virtual
Migration of physical machines to virtual machines

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Libkern

A

C++ runtime environment in XNU

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

IOKit: what, find, interface, support

A

Objected oriented kernel drivers
A driver is looked up through IORegistry
Driver properties are provided in IOUserClient
Kernel APIs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

APFS: definition and 4 features

A

Apple File System
Full 64-bit mode, snapshots, encryption, volume management

59
Q

APFS: definition and 4 features

A

Apple File System
Full 64-bit mode, snapshots, encryption, volume management

60
Q

DMG: what, why

A

Disk image
bundling software distribution into single files and can be mounted as a block device

61
Q

FSEvent: description

A

File system wide notifications

62
Q

Apple CLI to gather details about every aspect of the system

A

system_profiler

63
Q

Apple home applications

A

MacOS: finder
iOS: SpringBoard
TvOS: Pineboard
WatchOS: carousel
AudioOS: soundboard

64
Q

Apple HID monitor

A

MacOS: WindowServer
Others: backboardd

65
Q

Two entities of MacOS window

A

IOSurface provides the visible view
Tactile layer provides user input

66
Q

VirtioBlk: what and how to communicate

A

Simple virtual block device
Communication based on the virtio notification and queues

67
Q

Isochronous transfer in USB

A

Transmit at a constant rate for real time information such as audio and video

68
Q

Bridged networking

A

Replicate another node in the physical network and your VM will receive its own IP address if DHCP is enabled in the network

69
Q

SMBIOS: definition and function

A

System Management BIOS
Reading management information produced by the BIOS of a computer

70
Q

MDM: definition and 2 facts

A

Mobile device management
Securely and wirelessly configure a device by sending profiles and commands
Administer managed preferences

71
Q

Apple Open Directory: 2 facts

A

Light weight directory protocol (LDAP) implementation from Apple
Organize information about a network’s users and resources

72
Q

When isn’t APFS clone used?

A

Copy to a different volume
Copy nested directory
Extra: cp -c

73
Q

REST API: 2 facts

A

conforms to the representational state transfer principles
Integrate applications and components in microservices architecture

74
Q

XPC services: 3 benefits

A

mediate access to a shared resource
continue work beyond a client’s lifecycle
narrow the scope of access for different functionality

75
Q

3 Apple service types

A

Launch agent
Launch daemon
XPC service

76
Q

GPTK

A

Game porting kit

77
Q

Ray tracing

A

Technique for rendering light transport

78
Q

Turing machine: what and why

A

Abstract machine that manipulates symbols on a strip of tape according to a table of rules
Prove properties of computation in general

79
Q

IPSW: definition and description

A

iPhone software
File format for most Apple firmware

80
Q

Apple three commands to debug memory usage

A

leaks —outputGraph
Footprint
Vmmap

81
Q

Owned unmapped memory

A

Represent memory that your process allocated, shared with another process, unmapped from its own address space but not yet unmapped from the other process address space

82
Q

SFR

A

System firmware and recovery

83
Q

EBS

A

Block storage service designed for Amazon Elastic Compute Cloud (EC2)

84
Q

BSD interface name

A

Network driver name followed by a number.
Ex. En0

85
Q

Thimble

A

Trusted hybrid inference machine learning

86
Q

TCB in security: definition and description

A

Trusted computer base
Set of components that collectively enforce the system’s security properties

87
Q

Inode: definition and description

A

Index node
Data structure that describes a file or directory

88
Q

VHDX

A

Virtual hard disk drive of a virtual machine used by hyper-v

89
Q

Universal binary

A

Package with one binary for each architecture

90
Q

Apple CLI to see architectures of a universal binary

A

file

91
Q

Apple CLI to see details of a Mach O file

A

otool

92
Q

WASM

A

Web assembly

93
Q

Shared library cache

A

Prelink various commonly used Mach O dylibs into one file per architecture

94
Q

What does kevent do?

A

Block current thread until any of the requested events occur

95
Q

SPRR

A

Shadow permissions remap registers

96
Q

APRR

A

Access permissions remap registers

97
Q

CTRR

A

Configurable text read only region

98
Q

CDN: d2

A

Content distribution network
Geographically distributed network of proxy servers and their data centers

99
Q

UAF

A

Use after free

100
Q

Palladium

A

In circuit emulation for verification and debug

101
Q

Amazon: AMI

A

Amazon machine image

102
Q

AWS Nitro

A

Combination of dedicated hardware and lightweight hypervisor for running EC2 instances efficiently and securely

103
Q

VPC: d2

A

Virtual private cloud
Networking for cloud based resources and services that is global, scalable and flexible

104
Q

Tart VM: 2 facts

A

Link to virtualization framework
Run locally or in the cloud

105
Q

AI quantization: what, why

A

Convert input values from a large set to output values in a small set
Reduce computation demands of AI models

106
Q

NumPy

A

Python package for scientific computing

107
Q

Swift structured concurrency: two keywords

A

Async to define a method for doing asynchronous work
Await to call an async method

108
Q

DPDK: D2

A

Data Plane Development Kit
Open source kit consists of libraries to accelerate package processing workloads running on a wide variety of CPUs.

109
Q

Apple VideoToolbox: what and why

A

Low level framework that provides direct access to hardware encoders and decoders
For video compression and decompression, and for conversion between raster image formats

110
Q

Rasterization

A

Converting images in a vector graphics format to raster format used by display monitors

111
Q

TBB: d2

A

Thread building block
C++ template library from Intel for parallel programming on multi core processors

112
Q

Future

A

place holder for the result of an asynchronous operation

113
Q

Promise

A

Set the value of a future once an asynchronous operation is complete

114
Q

Pure function: do, don’t

A

Return the same result given the same argument
Cannot be affected by mutable states or other side effects

115
Q

VFS: define, what, why

A

Virtual file system
Standard interface for all file systems
Enable Linux to support large number of file systems

116
Q

SQ: define, push, pop

A

DI2 submission queue
Producer pushes a SQE for a new IO request, which rings the doorbell
Consumer pops a SQE to service the request

117
Q

CQ: define, push, pop

A

DI2 Complete Queue
Push a CQE for a completed IO operation, which may invoke a callback function.
Pop CQE to acknowledge

118
Q

Upward dependency

A

Two software modules that have link dependencies on each other

119
Q

TCC: definition, user perspective, OS perspective

A

Transparency, consent and control
OS perspective: manager of authorizing system
User perspective: decision input point

120
Q

ACIO: DD

A

Apple Converged Input Output
Apple trade-mark for USB 4.0

121
Q

OVS: definition, connections, routing

A

Open vSwitch
Connecting different VMs and Internet
Route packets from vhost net and NIC

122
Q

Libvirt : 2 functions

A

Translate XML configurations to QEMU CLI calls
Provide admin daemon to manage QMU child processes

123
Q

vhost protocol

A

Allows the virtio data plane implementation to be offloaded to another element (user process or kernel module) for performance

124
Q

Two meanings of virtio net

A

Virtio networking device implementation
Guest kernel front end described in the vhost net protocol

125
Q

DPDK: dd

A

Data plane development kit
Bypass the kernel networking stack and directly access network devices

126
Q

AMFI: definition, two functions

A

Apple Mobile files integrity
Validate code signatures
Ensure they are signed by a trusted authority

127
Q

ABA problem in concurrency

A

A value is read is twice and it’s having the same value is used to conclude nothing has happened in the interim

128
Q

REMITS: what, each letter

A

Chain of trust pipeline
Root of trust
Endorsement
Measurement
Identity
Trust
Secrets

129
Q

TCG in QEMU: D2

A

Tiny Code Generator
Dynamic translation backend that translates guest code to host code

130
Q

When is RC_XBS defined?

A

Both local and B&I builds using buildit

131
Q

When is RC_BUILDIT defined?

A

local build using buildit

132
Q

COCONUT SVSM: what, trust, 3 services

A

Secure VM service module
same trust boundary but isolated from guest operating system
vTPM
UEFI variable store
Live migration for CVMs

133
Q

IGVM: definition, 2 facts

A

Independent guest virtual machine
Encapsulate all the information required to launch a virtual machine on any virtualization stack
Contain measurement

134
Q

ARC: define, how, so what

A

Automatic reference counting
Retain and release are inserted at compile time
Deallocate objects with zero reference

135
Q

VPC: d2

A

Virtual private cloud
An isolated and customizable network within a public cloud

136
Q

Syntactic sugar

A

Programming syntax that’s easier to read and write

137
Q

Mersenne twister

A

Pseudo number generator

138
Q

Paravisor: security, function

A

Executed within the VM but higher privilege than the guest OS
Provide virtualization and device services

139
Q

OpenVMM

A

Modular cross-platform virtual machine monitor written in Rust

140
Q

OpenHCL - what, parts, why

A

Open source paravisor
Consists of OpenVMM, boot loader and Linux kernel
Confidential compute for non enlightened guests

141
Q

Progression of kernel memory corruption exploit - 6 steps

A

vulnerability → constrained memory corruption → strong memory corruption → memory read/write → control flow integrity bypass → arbitrary code execution

142
Q

Monad: what, why

A

Structure that combines program fragments and wraps their return values in a type with additional computations
Simplifying common operations and abstracting control flows

143
Q

Hyperlight: what, who

A

Open Source Rust library enabling fast and secure execution of small functions using hypervisor based protection
Developed by Microsoft Azure