4 ms·

Whether or not a default configuration is vulnerable is a pretty typical component of accessing a vulnerability’s severity. Unfortunate that the author didn’t

Whether or not a default configuration is vulnerable is a pretty typical component of accessing a vulnerability’s severity. Unfortunate that the author didn’t mention this. Obviously this doesn’t excuse the bug, but it’s important to contextualize if we hope to compare relative impact and have frank discussions.

comex 6y ago
The default configuration was, in fact, vulnerable at the time. Having it be commented out by default is new.
- saagarjha 6y ago
  The vulnerability: https://www.fcvl.net/vulnerabilities/macosx-gatekeeper-bypass https://www.fcvl.net/vulnerabilities/macosx-gatekeeper-bypas...