Thursday, March 21, 2019

Zero-day Safari Exploits Allowed Complete Takeover of Mac

Ben Lovejoy:

The first exploit managed to escape the sandbox, a protection macOS uses to ensure that apps only have access to their own data, and any system data permitted by Apple.

[…]

The second got rather further, gaining both root and kernel access to the Mac.

This despite process isolation and sandboxing

1 Comment RSS · Twitter


At least the platform is harder to use as a consumer now. Wait, no that's bad too. Kidding, mind of. maybe. I get security can be inconvenient sometimes, but it is funny the number of ways to exploit an increasingly walled garden platform.

Leave a Comment