3 ms·
Tl;dr One component of MacOS, involved with tracking downloads and ensuring an are-you-sure dialogue is presented when opening a download, does not appear to de
by orf 6y ago
Tl;dr One component of MacOS, involved with tracking downloads and ensuring an are-you-sure dialogue is presented when opening a download, does not appear to delete rows from its internal SQLite database after the file is deleted.
I’m not sure I’m too bothered about this. It might be quite hard to synchronise the database in a way that ensures the dialogue is always presented on first use.
- breakingcups 6y agoI would be bothered about this. It shouldn't be that hard to include this in the metadata on the filesystem, similar to what Windows does.
- pwinnski 6y agoThere is, in fact, a quarantine bit, but that metadata isn't very hard to change for a process that has enough access to a file to run it. `xattr -rc` and you're in. Disclaimer: I've not even begun to really dig into this, beyond reading a few assorted pages like this one: https://www.sentinelone.com/blog/macos-malware-researchers-how-to-bypass-xprotect-on-catalina/ https://www.sentinelone.com/blog/macos-malware-researchers-h... and this one: https://blog.malwarebytes.com/101/2019/02/macos-protect-malware/ https://blog.malwarebytes.com/101/2019/02/macos-protect-malw...