Can You Really Trust That Permission Pop-Up on macOS? (CVE-2025-31250)

Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by sureglymop on Monday May 12, 2025 @06:35PM (#43968088)

I wonder why they don't add a little led to their laptops that would indicate that it really is the system asking for your password. Kind of like the camera led.

[ Parent | on HN ]

Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by nmgycombinator on Monday May 12, 2025 @07:03PM (#43968276)

That's an interesting idea. I do think it would be nice to have some way of knowing "is this prompt coming from the operating system or some third-party app?". However, I don't think it would have helped in the case of my vulnerability, because it abused a legitimate OS prompt.

[ Parent | on HN ]

Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by kalleboo on Monday May 12, 2025 @09:20PM (#43968914)

When they had the touchbar on the MacBook Pros, they would put the authentication in there since that was something only the OS could take full control over.

[ Parent | on HN ]

Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by nmgycombinator on Monday May 12, 2025 @10:50PM (#43969287)

That's honestly a pretty smart move.

[ Parent | on HN ]

Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by kalleboo on Monday May 12, 2025 @11:04PM (#43969350)

Yeah it's a shame it's just such an overengineered/expensive thing.

[ Parent | on HN ]

Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by saagarjha on Tuesday May 13, 2025 @05:48AM (#43971239)

You can draw arbitrary content into it though?

[ Parent | on HN ]