[B! Security][ARM] raimon49ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

raimon49 id:raimon49

Securityã¨ARMã«é–¢ã™ã‚‹raimon49ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (10)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

iPhone 17ã®ã€Œãƒ¡ãƒ¢ãƒªã‚·ãƒ¼ãƒ«ãƒ‰ã€ãŒã‚¹ãƒ‘ã‚¤ã‚¦ã‚§ã‚¢æˆ¦äº‰ã‚’çµ‚çµã•ã›ã‚‹ï¼ŸAppleã®æœ€å¼·é˜²å£ã€ŒMIEã€ã¨ã¯ä½•ã‹ï¼Ÿ | XenoSpectrum
iPhone 17ã®ã€Œãƒ¡ãƒ¢ãƒªã‚·ãƒ¼ãƒ«ãƒ‰ã€ãŒã‚¹ãƒ‘ã‚¤ã‚¦ã‚§ã‚¢æˆ¦äº‰ã‚’çµ‚çµã•ã›ã‚‹ï¼ŸAppleã®æœ€å¼·é˜²å£ã€ŒMIEã€ã¨ã¯ä½•ã‹ï¼Ÿ AppleãŒç™ºè¡¨ã—ãŸiPhone 17ã€‚ãã®ç›®çŽ‰ã¯è–„ã•ã‚„ã‚«ãƒ¡ãƒ©æ€§èƒ½ã ã‘ã§ã¯ãªã‹ã£ãŸã€‚åŸºèª¿è¬›æ¼”ã§ã¯èªžã‚‰ã‚Œãªã‹ã£ãŸæ–°æ©Ÿèƒ½ã€ŒMemory Integrity Enforcement (MIE)ã€ã“ãã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã®æ´å²ã‚’å¡—ã‚Šæ›¿ãˆã‚‹å¯èƒ½æ€§ã‚’ç§˜ã‚ã¦ã„ã‚‹ã€‚ã“ã‚Œã¯ã€å›½å®¶ãƒ¬ãƒ™ãƒ«ã®ã‚¹ãƒ‘ã‚¤ã‚¦ã‚§ã‚¢ã•ãˆç„¡åŠ›åŒ–ã—ã†ã‚‹ã€ã¾ã•ã«ã€Œé‰„å£ã®ç›¾ã€ã ã€‚æžœãŸã—ã¦ã€Œãƒãƒƒã‚ãƒ³ã‚°ä¸å¯èƒ½ãªã‚¹ãƒžãƒ›ã€ã¯å®Ÿç¾ã™ã‚‹ã®ã‹ã€‚5å¹´ã«ã‚ãŸã‚‹é–‹ç™ºã®è£å´ã¨ã€ãã®è¡æ’ƒçš„ãªèƒ½åŠ›ã‚’è¦‹ã¦ã¿ã‚ˆã†ã€‚ ã‚¹ãƒ‘ã‚¤ã‚¦ã‚§ã‚¢é–‹ç™ºè€…ã«ã€Œçµ‚ç„‰ã€ã‚’å‘Šã’ã‚‹ã€iPhone 17ã®é™ã‹ãªã‚‹é©å‘½ 2025å¹´9æœˆã€Appleã¯iPhone 17ãŠã‚ˆã³iPhone Airã«ã€5å¹´ã®æ³æœˆã‚’ã‹ã‘ã¦é–‹ç™ºã—ãŸåŒ…æ‹¬çš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚·ã‚¹ãƒ†ãƒ ã€ŒMemory Integrity Enforcement
raimon49 2025/09/13
Apple

ARM

Security

memory

tag
ãƒªãƒ³ã‚¯
ã‚¤ãƒ³ãƒ†ãƒ«ã¨ARMã®CPUã«è„†å¼±æ€§ã€ŒSpectre-v2ã€ã®æ‚ªå¤¢å†ã³ã€æ–°ãŸãªæ”»æ’ƒæ‰‹æ³•
2017å¹´ã€ã‚¤ãƒ³ãƒ†ãƒ«ã‚„ARMã®CPUã«æƒ…å ±çªƒå–ã®è„†å¼±æ€§ãŒå˜åœ¨ã™ã‚‹ã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã£ãŸã€‚é€šå¸¸ã€CPUã®ãƒ—ãƒã‚»ã‚¹ã¯ã»ã‹ã®ãƒ—ãƒã‚»ã‚¹ã®å‡¦ç†ã—ã¦ã„ã‚‹ãƒ‡ãƒ¼ã‚¿ã‚’èªã¿å–ã‚‹ã“ã¨ã¯ã§ããªã„ä»•çµ„ã¿ã«ãªã£ã¦ã„ã‚‹ãŒã€ã‚ã‚‹æ©Ÿèƒ½ã‚’æ‚ªç”¨ã™ã‚‹ã“ã¨ã§å®Ÿè¡Œä¸ã®ãƒ—ãƒã‚»ã‚¹ã‹ã‚‰æœ¬æ¥ã¯å…¥æ‰‹ã§ãã¦ã¯ã„ã‘ãªã„ãƒ‡ãƒ¼ã‚¿ã‚’çªƒå–ã§ãã‚‹ã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã£ãŸã€‚ã“ã®ä»•çµ„ã¿ã‚’æ‚ªç”¨ã—ã¦è¤‡æ•°ã®æ”»æ’ƒæ‰‹æ³•ãŒé–‹ç™ºã•ã‚ŒãŸãŒã€ã€ŒSpectre-v2 (ã¾ãŸã¯BTI: Branch Target Injectio)ã€ã¨å‘¼ã°ã‚Œã‚‹æ‰‹æ³•ãŒæœ€ã‚‚å±é™ºãªæ”»æ’ƒæ–¹æ³•ã¨èªè˜ã•ã‚Œã¦ã„ã‚‹ã€‚ ã“ã‚Œã‚‰è„†å¼±æ€§ã«å¯¾ã—ã¦ã€ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ å´ãŒå¯¾ç–ã‚’å°Žå…¥ã—ãŸã»ã‹ã€CPUãƒ¡ãƒ¼ã‚«ãƒ¼ãŒãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ç·©å’Œç–ï¼ˆeIBRSã‚„CSV2ãªã©ï¼‰ã‚’å°Žå…¥ã—ãŸã€‚ã“ã®ç·©å’Œç–ã¯æ„å›³ã—ãŸé€šã‚Šã«æ©Ÿèƒ½ã™ã‚‹ãŒã€ã©ã†ã‚„ã‚‰ç ”ç©¶è€…ã¯ã“ã®æ”»æ’ƒæ‰‹æ³•ã‚’å¾©æ´»ã•ã›ã‚‹ã“ã¨ã«æˆåŠŸã—ãŸã‚ˆã†ã ã€‚ ç ”ç©¶è€…ã‚‰ã¯ã€ŒBranch History Injection
raimon49 2022/03/13
AMD

ARM

CPU

Intel

OS

Security

patch
ãƒªãƒ³ã‚¯
Armã€10å¹´ã¶ã‚Šã®æ–°ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã€ŒArmv9ã€ã€‚å¯Œå²³ã®SVEæ”¹è‰¯ç‰ˆã‚„ã‚³ãƒ³ãƒ•ã‚£ãƒ‡ãƒ³ã‚·ãƒ£ãƒ«ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ãƒ†ã‚£ãƒ³ã‚°æ©Ÿèƒ½è¿½åŠ
raimon49 2021/03/31
ARM

CPU

MachineLearning

Security

design
ãƒªãƒ³ã‚¯
HTMLã¨CSSã ã‘ã§Webãƒ–ãƒ©ã‚¦ã‚¶ã«ã‚µã‚¤ãƒ‰ãƒãƒ£ãƒãƒ«æ”»æ’ƒã‚’ä»•æŽ›ã‘ã‚‹æ‰‹æ³•
raimon49 2021/03/13
ARM

CPU

CSS

HTML

JavaScript

Security

browser

x86

æ™‚é–“
ãƒªãƒ³ã‚¯
CPUã®è„†å¼±æ€§ Meltdownã¨Spectreã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2018å¹´1æœˆ3æ—¥ã«CPUã«é–¢é€£ã™ã‚‹3ã¤ã®è„†å¼±æ€§æƒ…å ±ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚å ±å‘Šè€…ã«ã‚ˆã‚‹ã¨ã“ã‚Œã‚‰ã®è„†å¼±æ€§ã¯Meltdownã€Spectreã¨å‘¼ç§°ã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯é–¢é€£æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ è„†å¼±æ€§ã®æ¦‚è¦ å ±å‘Šè€…ãŒè„†å¼±æ€§æƒ…å ±ã‚’æ¬¡ã®å°‚ç”¨ã‚µã‚¤ãƒˆã§å…¬é–‹ã—ãŸã€‚ Meltdown and Spectre (ã¾ãŸã¯ã“ã¡ã‚‰) 3ã¤ã®è„†å¼±æ€§ã®æ¦‚è¦ã‚’ã¾ã¨ã‚ã‚‹ã¨æ¬¡ã®é€šã‚Šã€‚ è„†å¼±æ€§ã®åç§° Meltdown Spectre CVE CVE-2017-5754ï¼ˆRogue data cache loadï¼‰ CVE-2017-5753ï¼ˆBounds check bypassï¼‰ CVE-2017-5715ï¼ˆBranch target injectionï¼‰ å½±éŸ¿ã‚’å—ã‘ã‚‹CPU Intel Intelã€AMDã€ARM CVSSv3 åŸºæœ¬å€¤ 4.7(JPCERT/CC) 5.6(NIST) â†ã«åŒã˜ PoC å ±å‘Šè€…éžå…¬é–‹ è«–æ–‡ä¸ã«x
raimon49 2018/01/05
AMD

ARM

CPU

Intel

Linux

OS

Security

Virtualization

VM

cloud
ãƒªãƒ³ã‚¯
ãƒ—ãƒã‚»ãƒƒã‚µã®è„†å¼±æ€§ã€ŒMeltdownã€ã¨ã€ŒSpectreã€ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ | DevelopersIO
æ£®æ°¸ã§ã™ã€‚ æ–°å¹´æ—©ã€…å¤§å¤‰ãªè„†å¼±æ€§ãŒå‡ºã¦ãã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¯ãƒ©ã‚¹ã‚¿ãŒã–ã‚ã¤ã„ã¦ã¾ã™ã€‚ å†…å®¹ã«ã‚ˆã£ã¦2ã¤ã®è„†å¼±æ€§ã«åˆ†ã‹ã‚Œã¦ã„ã¦ã€ã€ŒMeltdownã€ã¨ã€ŒSpectreã€ã¨åå‰ãŒã¤ã‘ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ ç¾åœ¨ä½¿ç”¨ã•ã‚Œã¦ã„ã‚‹ã»ã¼å…¨ã¦ã®CPUã«ãŠã„ã¦å¯¾è±¡ã¨ãªã‚Šã†ã‚‹ã¨ã„ã†ç›¸å½“å½±éŸ¿ç¯„å›²ãŒåºƒã„è„†å¼±æ€§ã§ã™ã€‚ ã¾ã è©³ç´°ãŒå…¬é–‹ã•ã‚Œã¦ã„ãªã„éƒ¨åˆ†ã‚‚ã‚ã‚Šã¾ã™ãŒã€ãƒ‘ãƒƒãƒã§å¯¾å‡¦ã§ãã‚‹è„†å¼±æ€§ã§ã™ã®ã§è½ã¡ç€ã„ã¦å¯¾å¿œã—ã€ç¶šå ±ã‚’å¾…ã¡ã¾ã—ã‚‡ã†ã€‚ ç¾åœ¨åˆ†ã‹ã£ã¦ã„ã‚‹ç¯„å›²ã®æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ Meltdown and Spectre æ¦‚è¦ ä»Šå›žã®è„†å¼±æ€§ã¯å¤§ãã3ã¤ã«åˆ†ã‘ã‚‰ã‚Œã¾ã™ã€‚ Variant 1: bounds check bypass (CVE-2017-5753) Variant 2: branch target injection (CVE-2017-5715) Variant 3: rogue data cache load (CV
raimon49 2018/01/04
AMD

ARM

CPU

Intel

OS

Security

Virtualization

VM

patch
ãƒªãƒ³ã‚¯
ã‚¤ãƒ³ã‚µã‚¤ãƒ‰Nintendo Switch
My talk @ kernelvm é–¢è¥¿ #8
raimon49 2017/11/19
ARM

Emulator

Game

OS

Security

WebKit

binary
ãƒªãƒ³ã‚¯
ã‚¦ã‚©ãƒ¼ãƒ¬ãƒ³ãƒ»ãƒãƒ•ã‚§ãƒƒãƒˆã‚’ç›®æŒ‡ã™â€•â€•æŠ•è³‡å®¶ãƒ»å«æ£ç¾©æ°ãŒ10å…†å††ãƒ•ã‚¡ãƒ³ãƒ‰ã‚’èªžã‚‹
raimon49 2016/11/13
ï¼žã€Œã‚¤ãƒ¡ãƒ¼ã‚¸çš„ã«ã¯ã€ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼æ¥ç•Œã®ã‚¦ã‚©ãƒ¼ãƒ¬ãƒ³ãƒ»ãƒãƒ•ã‚§ãƒƒãƒˆã‚’ç›®æŒ‡ã—ã¦ã„ã‚‹ã€‚ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ã¯ãƒãƒ¼ã‚¯ã‚·ãƒ£ãƒ¼ãƒ»ãƒã‚µã‚¦ã‚§ã‚¤ï¼ˆãƒãƒ•ã‚§ãƒƒãƒˆæ°ã®æŠ•è³‡ä¼šç¤¾ã€ä¸–ç•Œæœ€å¤§ã®æŒæ ªä¼šç¤¾ï¼‰ã‚’ç›®æŒ‡ã—ã¦ã„ã‚‹ã€

AI

ARM

Finance

IoT

Security

SoftBank

america

mobile

venture

å«æ£ç¾©
ãƒªãƒ³ã‚¯
NFCï¼‹SEã¯å¿…é ˆäº‹é …ã§ã¯ãªã„â€•â€•ã€Œãƒ¢ãƒã‚¤ãƒ«ãƒšã‚¤ãƒ¡ãƒ³ãƒˆã®æ¬¡ã€ã«å‘ã‘ã¦å‹•ãå‡ºã—ãŸæºå¸¯æ¥ç•Œ
NFCï¼‹SEã¯å¿…é ˆäº‹é …ã§ã¯ãªã„â€•â€•ã€Œãƒ¢ãƒã‚¤ãƒ«ãƒšã‚¤ãƒ¡ãƒ³ãƒˆã®æ¬¡ã€ã«å‘ã‘ã¦å‹•ãå‡ºã—ãŸæºå¸¯æ¥ç•Œï¼šMobile World Congress 2014ï¼ˆ1/2 ãƒšãƒ¼ã‚¸ï¼‰ ç†è€…ãŒ2011å¹´2æœˆã«é–‹å‚¬ã•ã‚ŒãŸMobile World Congressã‚’æ©Ÿã«ã€NFCã¨ãƒ¢ãƒã‚¤ãƒ«ãƒšã‚¤ãƒ¡ãƒ³ãƒˆã«å–æå¯¾è±¡ã‚’çµžã‚Šå§‹ã‚ã¦ã‹ã‚‰3å¹´é–“ã€‚ä»Šå¹´ã®MWC 2014ã¯NFCï¼‹ãƒ¢ãƒã‚¤ãƒ«ãƒšã‚¤ãƒ¡ãƒ³ãƒˆã®ä¸–ç•Œã§æœ€ã‚‚å¤§ããªåœ°æ®»å¤‰å‹•ã‚’æ„Ÿã˜ã‚‰ã‚ŒãŸã‚¤ãƒ™ãƒ³ãƒˆã¨ãªã£ãŸã€‚ MWCã‚’ä¸»å‚¬ã™ã‚‹GSMAã¯ä¸»ã«æºå¸¯ã‚ãƒ£ãƒªã‚¢ãŒé›†ã¾ã£ãŸæ¥ç•Œå›£ä½“ã§ã‚ã‚Šã€MWCã§ç™ºã›ã‚‰ã‚Œã‚‹ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚‚æºå¸¯ã‚ãƒ£ãƒªã‚¢ã®æ„å‘ã‚’å¼·ãå—ã‘ã‚‹ã€‚ãã†ã—ãŸä¸ã§å‡ºã•ã‚Œã‚‹NFCï¼‹ãƒ¢ãƒã‚¤ãƒ«ãƒšã‚¤ãƒ¡ãƒ³ãƒˆã«é–¢ã™ã‚‹ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯ã€æºå¸¯ã‚ãƒ£ãƒªã‚¢ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã«æä¾›ã™ã‚‹SIMã‚«ãƒ¼ãƒ‰å†…ã®ã‚»ã‚ãƒ¥ã‚¢ã‚¨ãƒ¬ãƒ¡ãƒ³ãƒˆï¼ˆSEï¼‰ã«ã™ã¹ã¦ã®æƒ…å ±ã‚’é›†ã‚ã€ã“ã‚Œã‚’NFCã‚’é€šã˜ã¦å„ç¨®ã‚µãƒ¼ãƒ“ã‚¹ã‚’åˆ©ç”¨ã™ã‚‹ãŸã‚ã®â€œãƒãƒ–â€ã¨ã™ã‚‹ã“ã¨ã ã£ãŸã€‚ ã€ŒãŠã‚µã‚¤ãƒ•ã‚±ãƒ¼ã‚¿ã‚¤ã€
raimon49 2014/03/01
Host Card Emulation(HCE)ã®è©³ã—ã„è§£èª¬ã€‚

Android

ARM

Emulator

NFC

OS

Security

cloud

mobile

payment

ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰
ãƒªãƒ³ã‚¯
Windows RTã€jailbreakã•ã‚Œã‚‹ | ã‚¹ãƒ©ãƒ‰
ARMç‰ˆã®Windowsã§ã‚ã‚‹Windows RTã§ã¯ã€Officeãªã©ã®ã‚ˆã†ã«ã‚¹ãƒˆã‚¢ã‹ã‚‰ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã•ã‚ŒãŸMicrosoftã®ç½²åãŒã‚ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã—ã‹å®Ÿè¡Œã§ããªã„ä»•æ§˜ã«ãªã£ã¦ã„ã‚‹ã€‚ã“ã®åˆ¶é™ã‚’çªç ´ã—ã€ä»»æ„ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å®Ÿè¡Œã•ã›ã‚‹ã€Œè„±ç„ï¼ˆjailbreakï¼‰ã€ã«æˆåŠŸã—ãŸã“ã¨ãŒå ±ã˜ã‚‰ã‚Œã¦ã„ã‚‹ï¼ˆEXTREMETECHã€Clokræ°ã®ãƒ–ãƒã‚°ã€The Vergeã€æœ¬å®¶/.ï¼‰ã€‚ ã€‚ä»Šå›žã®è„±ç„æˆåŠŸã¯é•·ã„é–“å˜åœ¨ã—ã¦ã„ãŸWindowsã‚«ãƒ¼ãƒãƒ«ã®è„†å¼±æ€§ã‚’ä»˜ãå½¢ã§è¡Œã‚ã‚ŒãŸã€‚ãƒãƒƒã‚ãƒ³ã‚°ã‚’è¡Œã£ãŸClokræ°ã®ãƒ–ãƒã‚°ã«ã‚ˆã‚Œã°ã€Windowsã«ãŠã„ã¦ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å®Ÿè¡Œã™ã‚‹éš›ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ¬ãƒ™ãƒ«ã«ã¯ã€ŒUnsigned(0)ã€ã€ã€ŒAuthenticode(4)ã€ã€ã€ŒMicrosoft(8)ã€ã€ã€ŒWindows(12)ã€ã®4ç¨®é¡žãŒç”¨æ„ã•ã‚Œã¦ãŠã‚Šã€ä¸€èˆ¬çš„ãªWindowsã§ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã¯ã€Œ0ã€ãŒè¨å®šã•ã‚Œã¦ã„ã‚‹ã¨
raimon49 2013/01/09
ARM

Security

WindowsRT
ãƒªãƒ³ã‚¯
1