Hacker News Reader

Comment by klausa | Hacker News Reader

Because it's not a separate "light", like you have on your external camera, or on a laptop — it lights up specific pixels on the "main" screen; without the CPU/GPU/mainOS knowing about it.

View on HN

Exclaves run on the AP

What is the on-chip part of "Secure Exclave" then?

You will note that that verbiage does not appear in anything Gui says himself

I was gonna link to https://mastodon.social/@_inside/112440596781136013; but you're right, it says that "iPadOS running on M4" has "Secure Exclave"; not that "M4 has Secure Exclave".

Though I will admit I definitely misread it that way at first.

That is what 9to5Mac seems to have thought too :)

Thanks, I've edited the submission title to add "OS".

Do you have a source for this? I'm finding it difficult to find concrete information on the new Exclave.

This is all from research done by people smarter than me; not much has been published unfortunately. A good starting point for thinking about exclaves is by looking at ARM Realms or how pKVM is designed in Android.

> ARM Realms or how pKVM is designed in Android

And 2014-ish Bromium (now HP) uXen + AX, https://www.platformsecuritysummit.com/2018/speaker/pratt/

If the "Secure Exclave" is a privileged VM (alongside iPadOS VM) on a minimal bare-metal hypervisor, does that open the door to unprivileged Linux or other user VMs safely running alongside iPadOS on iPad Pro?

Reply on news.ycombinator.com