News for hackers. Stuff that matters.
Re:The ‘app’ you can’t trash: how SIP is broken in High Sierra by pilif on Wednesday January 03, 2018 @08:01AM (#16060603)
The dialog for kernel extension doesn't contain any of those labels though. Instead it offers you to open the "Security" preference pane where some additional UI will be displayed.

If you blindly click buttons you will not accidentally enable a kernel extension.

Re:The ‘app’ you can’t trash: how SIP is broken in High Sierra by mintplant on Wednesday January 03, 2018 @01:19PM (#16063479)
I have barely any experience with macOS, but could an application perform those steps on a user's behalf if it were granted Accessibility access?
Re:The ‘app’ you can’t trash: how SIP is broken in High Sierra by sp00ls on Wednesday January 03, 2018 @02:25PM (#16064180)
Every app I've installed that wants accessibility access follows the same steps from the comment you replied to. You must explicitly unlock that pane with your password after clicking the lock and then enable the app to have accessibility access.
Re:The ‘app’ you can’t trash: how SIP is broken in High Sierra by dunham on Wednesday January 03, 2018 @06:12PM (#16066379)
It's also possible to detect input events from accessibility. Little Snitch detects and ignores those events (tested via "Synergy" - a keyboard/mouse sharing application), as does the download icon that appears in the upper right corner of iBooks (I don't know why).

The accessibility preferences panel appears to accept those synthetic events, however.

Re:The ‘app’ you can’t trash: how SIP is broken in High Sierra by inetknght on Wednesday January 03, 2018 @10:01AM (#16061472)
> If you blindly click buttons you will not accidentally enable a kernel extension.

As someone who's gone poking around system internals for twenty-plus years... I can tell you that you're very wrong here. I've forgotten about more completely broken operating systems than I care to discuss, but many of them have ended with me poking around and blindly clicking buttons in a vain hope of getting the OS to do what I want it to do which is apparently frequently different from whatever OS producers want me to do.

Re:The ‘app’ you can’t trash: how SIP is broken in High Sierra by 1123581321 on Wednesday January 03, 2018 @10:28AM (#16061736)
You may want to use the workflow yourself to see how it differs and re-evaluate. It surprised me.