1

Can iOS apps read the RAM contents/cache/data of any other arbitrary app? Assume that the following conditions applies:

  • The device is using only official iOS (no hacks or "jailbreaking")
  • Obviously (due to the above conditions), all apps are downloaded and approved/signed by the App Store
  • None of the apps are using exploits (or all known exploits have been patched) and programmer API restrictions are working as intended
  • No other app on the device has been specifically set up to communicate with the app that wants to read the data

Context: preventing apps from snooping on each other. In particular, could a malicious app that somehow got through screening read RAM contents from every other app and harvest login cookies or personal information?

According to the Apple developer docs it appears that apps are sandboxed to prevent this from happening; apps that want to share data have to be specifically set up for it (?).

Searching on Google only turned up 2 Q&A's:

both of which only discuss the topic in the context of using a developer kit or jailbroken devices, neither of which are on topic in this question.

  • 6
    I'm not clear on your question. If the Apple docs say that things are sandboxed, then is your question if there is a known vulnerability that still makes it possible? – schroeder Oct 10 '17 at 13:24
1

No, this is not possible without the use of exploits. Even in Android, this is not possible.

  • I'd also like to add this is not possible in pretty much any OS without special permissions (debugger, root, etc) due to segmentation. This is where the segfault error comes from, meaning segmentation fault aka the program attempted to RW memory out of its bounds. – Sirens Oct 11 '17 at 2:19
  • In Windows and Linux, this is possible when the thread is the same user or admin to the remote thread. – Daniel Grover Oct 11 '17 at 13:39
  • ‚No unless there is an exploit‘ means ‚Yes when you use an exploit‘ :) – eckes Oct 13 '17 at 12:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.