macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files

guest · Sep 24, 2018

macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
September 24, 2018
https://www.bleepingcomputer.com/ne...bypass-flaw-allows-access-to-protected-files/

A security researcher shows on Mojave's release day that Apple's latest privacy protection implementations in macOS are not sufficiently strong.

In a minute-long clip, Patrick Wardle shows that the security in the dark-themed macOS can be bypassed to reach sensitive user data, such as the information in the address book.
Faulty implementation of the new security mechanism
Talking to BleepingComputer, Wardle says that he was able to access the confidential user contacts via an unprivileged app, meaning that it did not run with administrator permissions.

He says that the zero-day vulnerability stems from the way Apple implemented the protections for various privacy-related data.
Click to expand...

Rasheed187 · Sep 29, 2018

Another painful bug, Mac security sucks. But I do like the fact that the Mac now has this permission system, they should add something like this to Windows, and give even more restriction options, sort of like a behavior blocker.

guest · Feb 11, 2019

Privacy Protection Bypass Flaw in macOS Gives Access to Browsing History
February 11, 2019
https://www.bleepingcomputer.com/ne...aw-in-macos-gives-access-to-browsing-history/

A macOS privacy protection bypass flaw could allow potential attackers to access data stored in restricted folders on all macOS Mojave release up to the 10.14.3 Supplemental Update released on February 7.

The privacy flaw was discovered by Mac and iOS developer Jeff Johnson on February 8, and he has already received an automated bug report response after emailing a bug report to Apple Product Security on Saturday morning.
According to Johnson:

Mojave provides special access to this folder for only a few apps, such as Finder. However, I've discovered a way to bypass these protections in Mojave and allow apps to look inside ~/Library/Safari without acquiring any permission from the system or from the user. [...]
In an interview with BleepingComputer, the developer told us that "I discovered the bug while I was working on my own app. I was using a particular API, which I won't name, and it occurred to me that I could use that API to read restricted folders. So the bypass is nothing complex, it just requires Mac developer knowledge."
Click to expand...

Log in or Sign up

macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files

guest Guest

Rasheed187 Registered Member

guest Guest

Log in or Sign up

macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files

guest Guest

Rasheed187 Registered Member

guest Guest

Useful Searches