In this first volume of the "Mac OS and \*OS Internals" trilogy, Jonathan Levin takes on the user mode components of Apple's operating systems. Starting with an introduction as to their layered architecture, touring private frameworks and libraries, and then delving into the internals of applications, process, thread and memory management, Mach messaging, launchd and XPC internals, and wrapping up with advanced debugging and tracing techniques using the most powerful APIs that were hitherto unknown and unused outside Apple's own applications. As with the other books in this series, the approach taken is that of deep reverse engineering, with plenty of hands-on examples, illustrations, pointers to Apple's open sources (when available) and decompilation of code (when not). The book's companion website (NewOSXBook.com) is full of tools, samples and other bonus material for this book. Due to print run issues, NOTE FIRST COPIES WILL SHIP DECEMBER.

In this third and final volume of the "Mac OS and \*OS Internals" trilogy, Jonathan Levin takes on the security of Apple's OSes. Part I of this volume explores the mechanisms and techniques employed - Including Auditing, Authentication, the MAC Framework, Code Signing, Sandboxing, SIP, AMFI and more - most of which are documented for the first time. The second part then discusses historical vulnerabilities in MacOS 10.10 and 10.11, as well as all modern exploits - from Evasi0n (iOS6) through the very latest mach\_portal for 10.1.1 with KPP bypass in unprecedented detail - showing both the vulnerabilities and their exploitation methods, step by step. With no source code for most of Apple's components or for the jailbreaks, the approach taken is that of deep reverse engineering, with plenty of hands-on examples, illustrations and decompilation of code.