2 ms·
> If the attacker has filesystem access you're already hosed. I think that's not supposed to be true in modern (e.g. latest macOS) threat models. App Y isn't
by cjbprime 7y ago
> If the attacker has filesystem access you're already hosed.
I think that's not supposed to be true in modern (e.g. latest macOS) threat models. App Y isn't permitted to just replace App X unannounced, and on both Mac and Win there's a large codesigning infrastructure in place to provide that protection.
- applecrazy 7y agoAlso, sandboxing is designed to prevent unfettered filesystem access on macOS, meaning this isn’t part of the threat model if all apps are sandboxed and packaged.