Mac OS X sandbox security hole discovered, present in 10.5 and up
Highly rated gadgets
-
9.0
Panasonic LUMIX LX100 II
-
9.1
Apple iPhone XS Max
-
9.0
FujiFilm XF10
-
8.0
BlackBerry Motion
-
10.0
FujiFilm X-T3
-
9.0
Sony WH-1000XM3
-
10.0
Nikon Z 7
-
8.5
Xiaomi Mi A2
-
9.1
Apple iPhone XS
Starting with version 10.5 of its desktop OS, Apple has allowed developers to voluntarily remove functionality from their applications using a set of pre-defined profiles — nixing network access, or the ability to write to the filesystem, for example — as a way to limit the damage an app could do should it be compromised in the wild. CoreLabs Research has discovered a way to route around these limits: using Apple Events, a given application can launch other applications that don't have the same restrictions in place. Imagine an application that's been specifically prohibited from accessing the Internet being able to launch a fully-functioning Safari, and you'll get the idea. »read more
More at: TheVerge Add additional source
Filed in: Operating SystemsAppleMac OS X 10.5