3 ms·
I know it's not protocol to talk down Show HN submissions. But this is just a shell script loading a core component of TBS [0] during login without password pro
by aequitas 7y ago
I know it's not protocol to talk down Show HN submissions. But this is just a shell script loading a core component of TBS [0] during login without password prompts: by saving your password in a plain text file.
I can agree that password prompts at login are not the best user experience but security is there for a reason.
Maybe TBS should implement this using the privileged helper pattern [1] which allow a small daemon with root permissions to perform actions for a userland application through a secure RPC channel.
[0] https://github.com/rugarciap/Turbo-Boost-Switcher https://github.com/rugarciap/Turbo-Boost-Switcher
[1] https://developer.apple.com/library/archive/documentation/Security/Conceptual/SecureCodingGuide/Articles/AccessControl.html https://developer.apple.com/library/archive/documentation/Se...
[2] https://developer.apple.com/documentation/servicemanagement/1431078-smjobbless?language=objc https://developer.apple.com/documentation/servicemanagement/...
- stefan_ 7y agoWell, it also loads a random kernel extension that is only there as a binary blob that the author didn't make.
- akx 7y agoTBS's Pro version uses a privileged helper, says so in the readme. :)
- em500 7y ago> I know it's not protocol to talk down Show HN submissions. But this is just a shell script loading a core component of TBS [0] during login without password prompts: by saving your password in a plain text file. And TBS itself is (self-admittedly) largely a graphical wrapper around this kernel extension: https://github.com/nanoant/DisableTurboBoost.kext https://github.com/nanoant/DisableTurboBoost.kext