9 ms·
Running a parser for a network protocol as root seems like a pretty unnecessarily dumb thing to do. I can't really imagine why any part of airplay would need to
by Roguelazer 1y ago
Running a parser for a network protocol as root seems like a pretty unnecessarily dumb thing to do. I can't really imagine why any part of airplay would need to run as root; maybe something to do with DRM? Although the DRM daemon `fairplayd` runs as a limited-privilege user `_fpsd`, so maybe not. So bizarre that Apple makes all these cool systems to sandbox code, and creates dozens of privilege-separated users on macOS, and then runs an HTTP server doing plists parsing as an unsandboxed root process.
- Mindwipe 1y agoApple have reworked Airplay so many times at this point the entire thing is just a massive pile of technical debt piled on another massive pile of technical debt, piled on a bunch of weird hacks to try and keep all the devices built for previous versions afloat.
- walterbell 1y agoAt least it can be disabled via MDM/Configurator policy.
- bigyabai 1y agoTo the express benefit of all 3 Apple users that configure their devices with a PList editor.
- walterbell 1y agoThe breaches will continue until device policy improves.
- bigyabai 1y agoThree cheers for smart defaults!
- browser1 1y ago[dead]