/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

knight.sc
| | codecolor.ist

This bug has been fixed in Mojave Beta, but still present in latest High Sierra (10.13.5). It's a logic bug that an entitled binary tries to load an insecure external library controllable by environment variable. To exploit it we need to abuse sandbox, which is interesting that sometimes a mitigation could be turned to an exploit.
3.8 parsecs

Travel
| |
| | objective-see.org

[AI summary] This post provides a technical analysis of OSX.DazzleSpy, a cyber-espionage macOS implant used to target pro-democracy users in Hong Kong, detailing its persistence mechanisms, remote capabilities, and detection by Objective-See's tools.
4.3 parsecs

Travel
| |
| | blog.xojo.com

[AI summary] A Xojo developer provides a step-by-step guide on manually compiling, signing, and uploading macOS apps to App Store Connect using command-line tools like codesign, productbuild, and altool.
4.3 parsecs

Travel
| |
| | hiltmon.com

[AI summary] The post discusses increasing the file descriptor ulimit on macOS to prevent resource starvation in development environments, providing a script to adjust system limits permanently.
17.1 parsecs

Travel
|