News for hackers. Stuff that matters.

A comment on Unauthorized Cross-App Resource Access on Mac OS X and iOS.

Re:Unauthorized Cross-App Resource Access on Mac OS X and iOS by Animats on Wednesday June 17, 2015 @02:36PM (#9734272)
"...the inter-app interaction services, including the keychain, WebSocket and NSConnection on OS~X and URL Scheme on the MAC OS and iOS, can all be exploited by the malware to steal such confidential information as the passwords for iCloud, email and bank, and the secret token of Evernote."

If it's that good an exploit, it's probably already being exploited.

[ Parent | on HN ]

There are no comments on this comment yet.