News for hackers. Stuff that matters.

A comment on Can You Really Trust That Permission Pop-Up on macOS? (CVE-2025-31250). Parent comment

Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by QuercusMax on Monday May 12, 2025 @04:02PM (#43966916)
Seems like it should only need to do this once. I get this with almost every Slack and VSCode update. The correct solution for me is to quit Slack.app and let my company's management software do the update for me.
[ Parent | on HN ]
Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by closeparen on Monday May 12, 2025 @04:08PM (#43966970)
Maybe it's smart enough to require re-authorization when the binary changes?
[ Parent | on HN ]
Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by ubercow13 on Monday May 12, 2025 @04:16PM (#43967034)
Why would the helper binary change that much? A setuid-ish binary should be ultra simple and not constantly changing I'd assume.
[ Parent | on HN ]
Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by QuercusMax on Monday May 12, 2025 @04:21PM (#43967064)
...and it should be able to replace itself.
[ Parent | on HN ]
Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by socalgal2 on Monday May 12, 2025 @06:11PM (#43967933)
I don't use slack except in the browser. I never get a prompt for VSCode. It must be one of your extensions.
[ Parent | on HN ]
Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by QuercusMax on Tuesday May 13, 2025 @01:38PM (#43975551)
I've got them both installed through a corp-managed "software center". Don't have any exciting extensions that I've installed.
[ Parent | on HN ]
Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by trollbridge on Monday May 12, 2025 @06:24PM (#43968010)
Chances are they have some kind of management software like SentinelOne that is preventing Slack from doing this (or storing the permission to do so), so it just asks over and over. Which is arguably worse.
[ Parent | on HN ]