News for hackers. Stuff that matters.

A comment on iOS Privacy: Easily get a user's Apple ID password, just by asking. Parent comment

Re:iOS Privacy: Easily get a user's Apple ID password, just ... by amelius on Tuesday October 10, 2017 @10:31AM (#15442071)
> That's slightly different though, in order to do this you need to have shell access on the target's computer.

But I suppose any application can write to the current user's .bashrc file right? Then it can also set the alias whenever the user opens a terminal.

[ Parent | on HN ]
Re:iOS Privacy: Easily get a user's Apple ID password, just ... by simias on Tuesday October 10, 2017 @11:13AM (#15442448)
I don't think running a native application on a desktop is similar to running a sandboxed app on iOS. The security implication is wildly different IMO. I think a webapp is a more apt comparison.
[ Parent | on HN ]
Re:iOS Privacy: Easily get a user's Apple ID password, just ... by vortico on Tuesday October 10, 2017 @10:53AM (#15442272)
That's what shell access means. Running a program = access to system() and thus shell access.
[ Parent | on HN ]