News for hackers. Stuff that matters.

A comment on Mechanism many macOS security tools used to check signatures could be bypassed. Parent comment

Re:Mechanism many macOS security tools used to check signatu... by shawnz on Wednesday June 13, 2018 @02:41PM (#17305887)
The bug isn't in mac OS's signature validation though, which works fine. The bug lies in the additional validation performed by certain third-party security products. It has nothing to do with any of Apple's code whatsoever. Although as another commenter has pointed out, Apple could maybe have designed the API better to avoid it being used wrongly.
[ Parent | on HN ]
Re:Mechanism many macOS security tools used to check signatu... by spockz on Wednesday June 13, 2018 @06:22PM (#17307505)
Ah. I misinterpreted this as bugs in applications scanning their own bundle. But it is about security tools not properly verifying other binaries. Got it.
[ Parent | on HN ]