Can You Really Trust That Permission Pop-Up on macOS? (CVE-2025-31250)

Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by bigyabai on Monday May 12, 2025 @06:36PM (#43968105)

And to NSO Group's delight, they don't review SMS messages or Safari contents either. The "curated security" shtick is a lie, it does not protect anyone and doesn't function reliably in the first place. Both targeted malware and generic scams are rampant and unrestrained on iOS. Many of them are promoted as iPhone Search Ads, or suggested Siri results.

The knock-on effects it has are even worse. By relying on this game of shuffling private entitlements around, Apple has less incentive to actually review what developers are doing with them. Look at the Uber iPhone app's screenrecord permissions, or when TikTok stole iOS clipboards.

Apple uses "secure" review as an excuse to not review apps or secure their runtime.

[ Parent | on HN ]

Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by charcircuit on Monday May 12, 2025 @06:47PM (#43968184)

But they do secure their runtime. It's not an excuse not to.

[ Parent | on HN ]

Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by saagarjha on Tuesday May 13, 2025 @05:39AM (#43971192)

Apple's review sucks but you are very confused about your "takedown" of their security practices. It's not meant to protect against everything. Even well-made security boundaries can fail against sophisticated attackers, or be too onerous against generic malware.

[ Parent | on HN ]