{"id":42159,"date":"2024-02-19T20:42:03","date_gmt":"2024-02-20T01:42:03","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=42159"},"modified":"2024-02-19T20:42:03","modified_gmt":"2024-02-20T01:42:03","slug":"reporting-a-full-disk-access-bug-to-apple","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2024\/02\/19\/reporting-a-full-disk-access-bug-to-apple\/","title":{"rendered":"Reporting a Full Disk Access Bug to Apple"},"content":{"rendered":"<p><a href=\"https:\/\/www.mothsoftware.com\/on-reporting-a-security-problem-to-apple\">Beatrix Willius<\/a>:<\/p>\n<blockquote cite=\"https:\/\/www.mothsoftware.com\/on-reporting-a-security-problem-to-apple\">\n<p>Update from Ventura to Sonoma.<\/p>\n<p>[&#8230;]<\/p>\n<p>It is still possible to access the Mail folder even though FDA has been revoked. This also happens for other apps like <a href=\"https:\/\/findanyfile.app\/\">Find Any File<\/a>. I revoked FDA for Find Any File and was still able to search for emails in the Mail folder.<\/p><p>[&#8230;]<\/p><p>On 21-Sep-2023, I reported the bug to Apple as a security issue. Apple requested videos demonstrating the problem, code snippets, and screenshots. This took place over several weeks in November. At some point between the end of November 2023 and February 2024 the case was closed. Apple stated that they were not able to identify a security issue[&#8230;]<\/p><\/blockquote>\n\n<p>Previously:<\/p>\n<ul>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2023\/08\/21\/bypassing-app-management-with-textedit\/\">Bypassing App Management With TextEdit<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2021\/12\/23\/bypass-tcc-via-privileged-helpers\/\">Bypass TCC via Privileged Helpers<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2021\/07\/13\/more-trouble-with-the-apple-security-bounty\/\">More Trouble With the Apple Security Bounty<\/a><\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>Beatrix Willius: Update from Ventura to Sonoma. [&#8230;] It is still possible to access the Mail folder even though FDA has been revoked. This also happens for other apps like Find Any File. I revoked FDA for Find Any File and was still able to search for emails in the Mail folder.[&#8230;]On 21-Sep-2023, I reported [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2024-02-20T01:42:05Z","apple_news_api_id":"3c5288ca-ff60-40c0-aea4-6de0082404a4","apple_news_api_modified_at":"2024-02-20T01:42:05Z","apple_news_api_revision":"AAAAAAAAAAD\/\/\/\/\/\/\/\/\/\/w==","apple_news_api_share_url":"https:\/\/apple.news\/APFKIyv9gQMCupG3gCCQEpA","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[2098,2411,30,2223,2385,2557,2109,1960],"class_list":["post-42159","post","type-post","status-publish","format-standard","hentry","category-technology","tag-apple-security-bounty","tag-find-any-file","tag-mac","tag-macos-13-ventura","tag-macos-14-sonoma","tag-mail-archiver","tag-radar-and-feedback-assistant","tag-transparency-consent-and-control-tcc"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/42159","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=42159"}],"version-history":[{"count":1,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/42159\/revisions"}],"predecessor-version":[{"id":42160,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/42159\/revisions\/42160"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=42159"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=42159"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=42159"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}