News for hackers. Stuff that matters.
Re:Yet another macOS privacy protections bypass by rbrtl on Tuesday December 01, 2020 @12:38PM (#25267495)
You did use the word serious enough to make it compelling. But the author’s biography doesn’t mean that his comment wasn’t flippant.

He’s proved that an well-behaved, codesigned app can list file metadata about files in restricted directories. He hasn’t proven the sandbox compromised.

You claim he has so much serious evidence, link us there. Don’t just string adjectives together.

I have great respect for Jeff, but he is one of the more outspoken complainant Apple devs. At least he has a better basis for his commentary than DHH.

Re:Yet another macOS privacy protections bypass by saagarjha on Tuesday December 01, 2020 @01:55PM (#25268475)
A well behaved, codesigned app being able to list metadata about files in restricted directories is a sandbox compromise. In what viewpoint is it not?
Re:Yet another macOS privacy protections bypass by rbrtl on Tuesday December 01, 2020 @02:49PM (#25269065)
As pointed out by the most voted top level comment it's a kernel issue.
Re:Yet another macOS privacy protections bypass by Wowfunhappy on Tuesday December 01, 2020 @02:57PM (#25269146)
That doesn't mean it's not an issue.

I would like Apple to not roll out BS prompts that make my life more difficult until those prompts are actually capable of protecting some of the most sensitive data on my machine.

Re:Yet another macOS privacy protections bypass by saagarjha on Tuesday December 01, 2020 @04:40PM (#25270315)
A kernel issue where it fails to adequately enforce the sandbox?
Re:Yet another macOS privacy protections bypass by rbrtl on Wednesday December 02, 2020 @02:03AM (#25273909)
whatever man. you had a good go at me the other day. you're right I'm wrong, and HN is no longer the place for me
Re:Yet another macOS privacy protections bypass by saagarjha on Wednesday December 02, 2020 @05:30AM (#25275155)
Did I? The only other interaction I had with you recently that I can find is a discussion about Apple's security policies, which seemed fairly reasonable to me.