News for hackers. Stuff that matters.

A comment on Is macOS’s new XProtect behavioural security preparing to go live?. Parent comment

Re:Is macOS’s new XProtect behavioural security preparing to... by acdha on Monday September 04, 2023 @11:46AM (#37381593)
Those are separate threats. You must accept the risk of your hardware manufacturer being compromised but that’s very different from also accepting the risk that any third-party with brief physical access can compromise your device.
[ Parent | on HN ]
Re:Is macOS’s new XProtect behavioural security preparing to... by realusername on Tuesday September 05, 2023 @02:36AM (#37388568)
What happened is that instead of the user having all the rights, now it's Apple having them all instead. Not a single security problem was reduced here, the thread model just moved from users to Apple.
[ Parent | on HN ]
Re:Is macOS’s new XProtect behavioural security preparing to... by acdha on Tuesday September 05, 2023 @08:55AM (#37391000)
> Not a single security problem was reduced here, the threat model just moved from users to Apple.

If you don’t understand why this isn’t true, I would respectfully start reading about what the platform does. It’s not like it was around the turn of the century where PCs and Macs were roughly equivalent.

[ Parent | on HN ]
Re:Is macOS’s new XProtect behavioural security preparing to... by realusername on Tuesday September 05, 2023 @11:19AM (#37392849)
I know what the platform does, and that's why I have this opinion and also why I don't want any of it.
[ Parent | on HN ]
Re:Is macOS’s new XProtect behavioural security preparing to... by acdha on Tuesday September 05, 2023 @11:21AM (#37392889)
Not wanting it is a valid position. Lying about it not solving real problems is not.
[ Parent | on HN ]
Re:Is macOS’s new XProtect behavioural security preparing to... by realusername on Tuesday September 05, 2023 @11:32AM (#37393085)
I'm not saying it doesn't solve real problems, I'm saying its swapping problems into others.

Sure you can find some problems that have been solved but for each of those, there's a brand new problem created and not necessarily any better than the previous one.

[ Parent | on HN ]