nmgycombinator

7 ms·

1.
CVE-2025-43253: Bypassing Launch Constraints on macOS(wts.dev)
2 points by nmgycombinator 1y ago|0 comments
2.
by nmgycombinator 1y ago
> The primary outcome appears to be increased profit margins rather than societal advancement. While previous technological revolutions created new industries and democratized access, AI seems focused on optimizing existing processes wit
3.
by nmgycombinator 1y ago
Edit made: Ventura and Sonoma will remain vulnerable. Apple made the decision to only patch this in Sequoia.
4.
by nmgycombinator 1y ago
I mean, I don't know how there would be? Unless they were scanning the text of every pop-up for words convincing the user to enter their computer password. There would be no way to determine intention without some sort of language anal
5.
by nmgycombinator 1y ago
I agree with you. However, in this case, I was abusing a legitimate OS prompt (not just making my own), so I don't know if a security image would be a barrier there. It would definitely be one for instances where malicious apps make th
6.
by nmgycombinator 1y ago
That's a fair point. But did Mac have the same issue as Windows where file extensions were not shown by default? That feels like it would have been the core issue.
7.
by nmgycombinator 1y ago
I mean, as others have mentioned, actually true capabilities would be nice. But as long as we're going to have a database, it would have to end up in user space or in the kernel. And I'm not sure how much I like either option.
8.
by nmgycombinator 1y ago
Ooh! Thanks for the links!
9.
by nmgycombinator 1y ago
I think Apple uses an L4 variant for their SEP co-processor, though I'm not sure if it's that specific one. Sounds like another OS I'll probably have to do a deep dive into at some point.
10.
by nmgycombinator 1y ago
Damn, that really puts things into perspective. Granted, attached modals presuppose there's a window to attach to. But I think that would probably be true 9 times out of 10.
11.
by nmgycombinator 1y ago
I do agree that uninstallation can be hard on macOS. I think Apple just envisions a future where every app is self-contained and putting the app in the trash really does remove everything because it was all in there. Maybe that's not r
12.
by nmgycombinator 1y ago
I will definitely admit, it can be a bit of a pain point that Apple sometimes takes a lot of time to determine a bounty. I'm just waiting patiently now to see what they say. I appreciate your kind words and encouragement.
13.
by nmgycombinator 1y ago
I think their "Hall of Fame" (or at least whatever people colloquially refer to as that) is their credits for people who found bugs in their web servers, so I don't think that counts here. I did get credited, so I'm happ
14.
by nmgycombinator 1y ago
Correction (longer explanation elsewhere): only 15.5. Apple didn't patch it in the other two releases.
15.
by nmgycombinator 1y ago
Yeah, to be perfectly honest, I understand. I think TCC is meant to be the primary consent system, but there are others (such as the Authorization system, and the Service Management framework).
16.
by nmgycombinator 1y ago
As someone who dove deep into keychain items for a previous write-up, I believe you are misunderstanding this situation. As far as I understand it, many keychain items can be stored in your iCloud keychain. However, your local machine can h
17.
by nmgycombinator 1y ago
That's honestly a pretty smart move.
18.
by nmgycombinator 1y ago
Hijacking this current top comment to let everyone know there is an important update to this article: https://news.ycombinator.com/item?id=43969087
19.
by nmgycombinator 1y ago
Oh nice! I'll take a look at these.
20.
by nmgycombinator 1y ago
An important correction, so hopefully this bubbles to the top (this will be appearing on the post as well): A previous version of this article mentioned below that this CVE was patched in macOS Sequoia 15.5 et al., but I was a bit mistaken
21.
by nmgycombinator 1y ago
Thank you for your kind words. To respond: 1. I'm not a "he", I would prefer "they". 2. As I mentioned in another comment, I have not received word back yet on any reward.
22.
by nmgycombinator 1y ago
As someone who's looked into the internals of macOS for a bit now, this is all incredibly fascinating. However, I am curious: do you think capabilities could be implemented like this at a really low level? Part of me thinks we have the
23.
by nmgycombinator 1y ago
Lol, I know that curiosity feeling.
24.
by nmgycombinator 1y ago
Damn, that sucks.
25.
by nmgycombinator 1y ago
I'll definitely start considering it.
26.
by nmgycombinator 1y ago
How often do you face that? I would think the OS would save your response in a way it could refer back to.
27.
by nmgycombinator 1y ago
There's a small section in System Settings that they don't really tell you about that pops up when the OS blocks a file from opening. You can then override the block there. Yes, it's extremely annoying.
28.
by nmgycombinator 1y ago
Quick clarification on terminology. From a developer perspective, entitlements a static dictionary (or a collection of key-value pairs) attached to the app at code-signing time. The entitlements you mentioned don't "entitle"
29.
by nmgycombinator 1y ago
> The idea being that I could then migrate more easily by copying the whole home directory, and thus all my apps that didn't require "installation" would come over. Unrelated, but this is what I find so interesting and coo
30.
by nmgycombinator 1y ago
Fascinating! Personally, I need an admin account in my daily work, so I wouldn't do this, but for those it could help it definitely looks interesting.

More ›