social.noyu.me

so i tested it (https://gist.github.com/hikari-no-yume/ea99e733f6d99cb9b43c5680b3245a51) and apparently modern-ish linux doesn't let you read other processes' memory without root access. but the file permissions suggest i should be able to. is this like a selinux thing or a kernel default or what. ubuntu 20.04 lts btw

tbh if i was making the default config for a server os i would disable /proc/xxx/mem. if you have rce but no privilege escalation there'd be lots of fun you could have with it otherwise

@hikari task_for_pid is actually kind of a good security model don’t @ me

@saagar i agree, i have some complaints but overall i think “system integrity protection” and related things are quite well-designed

@hikari If Apple ships AMFI Trusted Keys I will go back and like this

@hikari Image if you could be the root of trust on your machine

@slice @hikari This is actually the security model of all computers Apple just identifies it as something specific

@slice @hikari They do. Internally

@slice @hikari Skill issue

@saagar @slice what, do you have the skill

@hikari @slice No comment