5 ms·
Fascinating article. Short version: there was a bug in the part of Apple’s Gatekeeper code that checked whether a file was an application bundle. Bundles that o
by jdlshore 6y ago
Fascinating article. Short version: there was a bug in the part of Apple’s Gatekeeper code that checked whether a file was an application bundle. Bundles that only contained a script, and not a plist file, were considered “not a bundle,” and this bypasses the Gatekeeper checks.
The issue is fixed in the latest version of Big Sur. Be sure to upgrade. It’s being exploited in the wild.
- submeta 6y agoWhat about macOS Catalina users? Any updates / fixes for them? Do you happen to know?
- therealmarv 6y agoThe bad thing is: They patched Catalina less than Big Sur with the new update :( Compare "Gatekeeper" fixed issues here: https://support.apple.com/en-us/HT212326 https://support.apple.com/en-us/HT212326 Catalina https://support.apple.com/en-us/HT212325 https://support.apple.com/en-us/HT212325 Big Sur Feels for me that they only patched one part of it on Catalina but gates are more open on the older macOS. Really don't like that.
- phnofive 6y agoIt appears this behavior was introduced in Catalina, so I’d assume a complimentary fix to 11.3 will be available for 10.x - no word on timing AFAIK.
- ilikepi 6y agoSecurity Update bundles were released for Catalina and Mojave as well. The list of security fixes for the Big Sur update 11.3 has three entries mentioning Gatekeeper: https://support.apple.com/en-us/HT212325 https://support.apple.com/en-us/HT212325 ...whereas the list for Catalina has only one: https://support.apple.com/kb/HT212326 https://support.apple.com/kb/HT212326
- benatkin 6y ago> Be sure to upgrade. This is a technical crowd, so some of us don't need to rush to download things like this. I'll upgrade when it's convenient, thank you very much.
- puszczyk 6y agoWhy is the technical crowd less in need of an upgrade? My proverbial “grandmother” only accesses her gmail and one news page. Arguably she’s at less risk than someone testing new software.
- sildur 6y agoFunny that when you started with "this is a technical crowd" I thought you will continue with "we don't need to be reminded to upgrade".
- dizzystar 6y agoWe may be technical, but we are beholden to products we use as well. Being technical can also mean we are more aware of the dangers of upgrading too soon.
- hoka-one-one 6y agoI usually hack the hackers first
- healsjnr1 6y agoGiven the ease and severity of this I don't think being technical does anything for you. I am grateful for the "upgrade now" message being pushed it. As a technical user I can't trust my skills and knowledge to truly keep me safe from this one.
- tinus_hn 6y agoHow did you ever survive all that time where you had to decide for yourself whether to run a program or not, without Gatekeeper holding your hand?
- LeoPanthera 6y agoIs this how early versions of the Zoom installer bypassed gatekeeper for a zero-click install?
- Xeago 6y agoThat worked by using the preinstall check that Installer.app invokes to do the installation. It would finish by force quitting Installer.