News for hackers. Stuff that matters.

A comment on How Dropbox Hacks Your Mac. Parent comment

Re:How Dropbox Hacks Your Mac by elmigranto on Saturday September 10, 2016 @08:13AM (#12468835)
It is, but OS X won't accept it and will not unlock Keychain item, unless all the apps that do this are in Accessibility. So if there is an app that uses those APIs but not in Accessibility, even you yourself won't be able to copy anything password-protected from Keychain.

https://support.apple.com/en-us/HT205375

  SecurityAgent
  Available for: OS X El Capitan 10.11

  Impact: A malicious application can programmatically control keychain access prompts

  Description: A method existed for applications to create synthetic clicks on keychain prompts. This was addressed by disabling synthetic clicks for keychain access windows.

  CVE-ID
  CVE-2015-5943
[ Parent | on HN ]

There are no comments on this comment yet.