Xnu on Hanh Pham's Bloghttps://hanh.me/tags/xnu/Recent content in Xnu on Hanh Pham's BlogHugoen-usFri, 23 Oct 2026 10:18:35 +0700Read the Fix First: A Patch-Margin Method for XNU Researchhttps://hanh.me/posts/xnu-patch-margin-research/Fri, 09 Oct 2026 09:30:00 +0700https://hanh.me/posts/xnu-patch-margin-research/A source-first method for Apple kernel research: diff consecutive XNU tags, mine the regression tests that ship with the fixes, map sibling call sites, and rank candidates by how well they survive Memory Integrity Enforcement. Four evidence gates, a safe workflow, and the stop conditions that keep this work honest.iOS Is Not One Boundary: From App Sandbox to Secure Enclavehttps://hanh.me/posts/ios-architecture-from-sandbox-to-secure-enclave/Wed, 07 Oct 2026 10:00:00 +0700https://hanh.me/posts/ios-architecture-from-sandbox-to-secure-enclave/A boundary-first map of the iOS stack, from app sandbox and XPC through XNU subsystems to PAC, SPTM, and the Secure Enclave, with the evidence gates I use before calling anything a finding.