News for hackers. Stuff that matters.
Re:Yet another macOS privacy protections bypass by cle on Tuesday December 01, 2020 @12:13PM (#25267175)
It's not flippant, read through the author's history: https://lapcatsoftware.com/articles/index.html

This is a serious stance of his, with a lot of serious data and arguments to back it up, from a serious engineer who has written an impressive list of Mac software both for Apple and for Apple's customers.

Re:Yet another macOS privacy protections bypass by rbrtl on Tuesday December 01, 2020 @12:38PM (#25267495)
You did use the word serious enough to make it compelling. But the author’s biography doesn’t mean that his comment wasn’t flippant.

He’s proved that an well-behaved, codesigned app can list file metadata about files in restricted directories. He hasn’t proven the sandbox compromised.

You claim he has so much serious evidence, link us there. Don’t just string adjectives together.

I have great respect for Jeff, but he is one of the more outspoken complainant Apple devs. At least he has a better basis for his commentary than DHH.

Re:Yet another macOS privacy protections bypass by saagarjha on Tuesday December 01, 2020 @01:55PM (#25268475)
A well behaved, codesigned app being able to list metadata about files in restricted directories is a sandbox compromise. In what viewpoint is it not?
Re:Yet another macOS privacy protections bypass by rbrtl on Tuesday December 01, 2020 @02:49PM (#25269065)
As pointed out by the most voted top level comment it's a kernel issue.
Re:Yet another macOS privacy protections bypass by Wowfunhappy on Tuesday December 01, 2020 @02:57PM (#25269146)
That doesn't mean it's not an issue.

I would like Apple to not roll out BS prompts that make my life more difficult until those prompts are actually capable of protecting some of the most sensitive data on my machine.

Re:Yet another macOS privacy protections bypass by saagarjha on Tuesday December 01, 2020 @04:40PM (#25270315)
A kernel issue where it fails to adequately enforce the sandbox?
Re:Yet another macOS privacy protections bypass by rbrtl on Wednesday December 02, 2020 @02:03AM (#25273909)
whatever man. you had a good go at me the other day. you're right I'm wrong, and HN is no longer the place for me
Re:Yet another macOS privacy protections bypass by saagarjha on Wednesday December 02, 2020 @05:30AM (#25275155)
Did I? The only other interaction I had with you recently that I can find is a discussion about Apple's security policies, which seemed fairly reasonable to me.
Re:Yet another macOS privacy protections bypass by zepto on Tuesday December 01, 2020 @04:29PM (#25270171)
The biggest issue with the author is that he complains both about the controlling/locked down nature of Apple’s platforms and about any bugs that show up in that system.

I.e. His goal is to criticize Apple no matter what they do, because he dislikes the fact that they are no longer producing the kind of open system he prefers.

Re:Yet another macOS privacy protections bypass by saagarjha on Tuesday December 01, 2020 @04:47PM (#25270397)
I think the angle he has is “Apple should remove these protections because they can’t implement them correctly”.
Re:Yet another macOS privacy protections bypass by zepto on Tuesday December 01, 2020 @05:32PM (#25270923)
Yeah, which doesn’t seem reasonable, especially when mixed in with a bunch of assumptions about ill intent.

There are an enormous number of protections and a small number of issues, which do eventually get fixed, and of course the threats are undeniable.

However you are right that Apple is notoriously had at communicating about bugs.