7 ms·

> Worse than this, it's possible to DoS a Mac with an NFS server just by refusing to reply to a request. I wonder if their SMB/CIFS client implementation has t

> Worse than this, it's possible to DoS a Mac with an NFS server just by refusing to reply to a request. I wonder if their SMB/CIFS client implementation has these kinds of issues? It probably gets used more heavily > And I don't even think its exposed by headers Apple (accidentally?) released some of the private headers for this feature in one of their open source releases: https://github.com/apple-oss-distributions/msdosfs/blob/rel/msdosfs-435/LiveFilesTester/UserVFS.h https://github.com/apple-oss-distributions/msdosfs/blob/rel/...

duped 3y ago
Maybe? It's kind of hard to tell. It's not exactly easy to write any of these servers from scratch to find out. But I wouldn't be surprised - they want app developers to be using the file provider extension API, which is unsuitable for everyone who isn't making a Dropbox clone. That link is very interesting. It doesn't smell like any other Apple API as they're exposing a vtable with good documentation comments. It would be interesting to hack with this with SIP disabled to see how it works. I'm especially curious about how mount/unmount work and how the plugin registers itself with the OS, or what application is the client/host.