2 ms·
Patrick Wardle (the source of this video) is on a roll today: https://www.synack.com/2017/09/08/high-sierras-secure-kernel-extension-loading-is-broken/ https://
by teilo 9y ago
Patrick Wardle (the source of this video) is on a roll today: https://www.synack.com/2017/09/08/high-sierras-secure-kernel-extension-loading-is-broken/ https://www.synack.com/2017/09/08/high-sierras-secure-kernel...
- teilo 9y agoThis makes me wonder if the vector for this exploit is a kernel extension that subverts the keychain service. Except that the kernel loading exploit appears to require root privileges.