Jeff Johnson personal blog
Yet another macOS privacy protections bypass
Today I'm disclosing a macOS privacy protections bypass. I discovered that an application can use the venerable Unix command-line tool "ls" (list directory contents) to bypass both TCC (Transparency, Consent, and Control) and the sandbox, enabling unauthorized access to file metadata in directories that are supposed…
- Points
- 320
- HN comments
- 90
- Submissions
- 1
- Cited by
- 0 commenters
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Dec 1, 2020 | Yet another macOS privacy protections bypass by maxdesiatov | 320 | 90 |
