News for hackers. Stuff that matters.

A comment on macOS deprecating scripting language runtimes, including Python, Ruby, and Perl. Parent comment

Re:macOS deprecating scripting language runtimes, including ... by Fnoord on Thursday June 06, 2019 @04:04AM (#20112490)
Basically it means if someone has user access on a Mac with Homebrew (with default settings), they also have root. So a remote hole in, say, Safari, means your entire system is compromised.

(That said, I actually use Homebrew.)

[ Parent | on HN ]
Re:macOS deprecating scripting language runtimes, including ... by saagarjha on Thursday June 06, 2019 @04:57AM (#20112766)
They don't quite have root per se, but they have a functional elevation of privileges if some some other software has a bug in it with regards to pulling binaries from $PATH, which is quite common.
[ Parent | on HN ]