3 ms·
From the article: > The bugs uncovered by Bohan work across all widely-used Apple operating systems, however, including Mac OS X, tvOS and watchOS. Indeed, Boh
by deanclatworthy 10y ago
From the article:
> The bugs uncovered by Bohan work across all widely-used Apple operating systems, however, including Mac OS X, tvOS and watchOS. Indeed, Bohan noted that Mac OS X doesn’t have sandboxing, giving an attacker remote access to the PC with the victim’s passwords. That potentially makes it a more severe threat to owners of Apple’s PCs, as a simple email could prize Macs open.
Sounds like it could be pretty bad.
- Someone 10y agoDoesn't _have_ sandboxing? It may not be used much, but there is https://developer.apple.com/library/mac/documentation/Security/Conceptual/AppSandboxDesignGuide/AboutAppSandbox/AboutAppSandbox.html https://developer.apple.com/library/mac/documentation/Securi..., and Safari uses it, for example to Mail.app, FaceTime, quicklook plug-ins, sandbox its PDF parser and (if still present) Flash player (http://www.apple.com/osx/what-is/security/ http://www.apple.com/osx/what-is/security/)
- deanclatworthy 10y agoYep. The main reason I thought this was worth mentioning though was the original title of the article singled out iOS :)