A deep dive into macOS 11’s internals reveals some security surprises that deserve to be more widely known. Contents Introduction Disclaimers macOS 11’s better known security improvements Secret messages revealed? CPU security mitigation APIs The NO_SMT mitigation The TECS mitigation … Read more
August 7, 2021 As always, this post reflects my own opinions, and not anyone else’s. There has recently been some renewed discussion on Twitter about the limitation that the macOS sandbox places on the number of open files an app … Read more
I recently got a new Macbook, and began setting up the Nix package manager to install my developer toolset. I mainly did this to try and have a working setup without installing Homebrew. Since I ran into a few issues, … Read more
From the outset, Mac OS X and macOS have been designed around a relatively small kernel which is given additional capabilities by kernel extensions. The kernel itself runs at a highly privileged level, giving it most direct access to resources … Read more
Executive Summary TCC is meant to protect user data from unauthorized access, but weaknesses in its design mean that protections are easily overridden inadvertently. Automation, by design, allows Full Disk Access to be ‘backdoored’ while also lowering the authorization barrier. … Read more
GitHub – mattrighetti/HNReaderApp: Public repository for the HNReader macOS application {{ message }} Files Permalink Failed to load latest commit information. Type Name Latest commit message Commit time Jun 14, 2021 This is the public repository for the HNReader macOS … Read more
All Your Macs Are Belong To Us bypassing macOS’s file quarantine, gatekeeper, and notarization requirements by: Patrick Wardle / April 26, 2021 Our research, tools, and writing, are supported by the “Friends of Objective-See” such as: 📝 👾 Want to … Read more