关于 Apple M1 的群众意见每日汇总 [码农方向][2020.11.20]
Apple M1 & 白帽 & 黑灰产 by @蒸米 spark
苹果不光不讲武德，还对安卓痛下杀手，测试了一下，就算是没有在 mac 的 appstore 上上架的应用也可以用砸壳后的 ipa 在 mac 上原生运行，也可以轻松对其 hook 。听我同事说，最夸张是企业签名后的 ipa 包，直接双击运行跟执行 exe 一样方便。黑灰产的春天来了，还搞毛线的群控，几台 Mac 直接全部搞定。[二哈]
https://weibo.com/2250770035/JuE6t2w8A
iPhone 上拖下来的 ipa，一点修改都不用做就可以在 macOS 上跑了，想运行啥版本就运行啥版本，想 hook 就 hook，想多开就多开，用脚本执行任意函数也可以，甚至写个脚本用鼠标自动点击也可以。哎，我以后再也不会相信直播在线人数，销量，播放量啥的指标了。。。[允悲][允悲][允悲]
更扯淡的是在 iOS 上不越狱很难搞到 app 沙盒里的文件，对用户的数据来说是一种保护，结果在 macOS 上运行的 iOS app，数据全都放在 user 目录里，普通权限随便读写，聊天记录，明文密码啥的，一秒钟就给拖走，篡改文件导致代码执行啥的也有可能。。。
iOS app 运行时加载的库都是用的系统原生的（主要是在 iOSSupport 目录下），无论是 fuzz 还是研究新的攻击面估计都会有重大收获，以后 iOS 的漏洞和 rce 少不了[doge]
@Flanker_017: ARM 芯片在桌面消费市场真正的应用带来的影响是颠覆性的，无论是对灰黑产，风控，还是安全研究
iOS App 流量抓包
ARM-based macOS can run iOS apps + network traffic/cert store is tied to macOS = perfect for iOS app hacking
ARM-based macOS can run iOS apps + network traffic/cert store is tied to macOS = perfect for iOS app hacking pic.twitter.com/svYVfnUJjR
— Ian Carroll (@iangcarroll) November 19, 2020
Build macOS ARM apps in Xcode without a real macOS ARM SDK, by Zhuowei Zhang
Here’s a script that modifies Xcode’s macOS SDK to build for ARM. You can use this to find code that won’t compile on ARM, to get a head start on porting before Apple releases Xcode for an ARM Mac.
![关于 Apple M1 的群众意见每日汇总 [码农方向][2020.11.20]](http://4563.org/wp-content/uploads/2020/11/00849gGzgy1gkvbhhet04j30mz0hktbt.jpg)
https://worthdoingbadly.com/sim-macos-arm-sdk/
Audio/DSP
M1 move hit sound designers, plugin companies, and instrument companies so hard atm. Imagine rewriting all of your low latency DSP code on new architecture. From scratch…
M1 move hit sound designers, plugin companies, and instrument companies so hard atm. Imagine rewriting all of your low latency DSP code on new architecture. From scratch…
— Theo M. Bulut (@vertexclique) November 19, 2020
Rosetta2 == Intel 🙂
neat m1 tip: in activity monitor under Architecture you can see what’s running native or rosetta 2. It’ll be defined as Intel or Apple.
![关于 Apple M1 的群众意见每日汇总 [码农方向][2020.11.20]](http://4563.org/wp-content/uploads/2020/11/20201124_5fbc9c718976d.jpg)
neat m1 tip: in activity monitor under Architecture you can see what's running native or rosetta 2. It'll be defined as Intel or Apple. pic.twitter.com/w2LQ5kSgPa
— Jonathan Morrison 🙋🏻♂️ (@jonxfriends) November 19, 2020