4 ms·

To be fair I'm horribly out of date on Windows too. Once they can ditch the worst of legacy support they'll have room to patch the holes that remain, that much

To be fair I'm horribly out of date on Windows too. Once they can ditch the worst of legacy support they'll have room to patch the holes that remain, that much I know. I'd like to see Microsoft implement something like TCC in Windows. https://book.hacktricks.xyz/macos-hardening/macos-security-and-privilege-escalation/macos-security-protections/macos-tcc https://book.hacktricks.xyz/macos-hardening/macos-security-a... ASLR on macOS has gotten a lot better, with full randomization down to the kernel since El Capitan I think. Fixed page offsets (the worst offense imo) were also removed. The secure enclave brought CMAC and PAC soon after.

ruthmarx 2y ago
> I'd like to see Microsoft implement something like TCC in Windows. > https://book.hacktricks.xyz/macos-hardening/macos-security-a https://book.hacktricks.xyz/macos-hardening/macos-security-a... I think there is something equivalent to that, although I don't know that it's part of a specific framework. There are privacy protections in place for accessing various hardware and permissions needs to be granted [1]. I think the rest of what that link covers is handled by UAC. > ASLR on macOS has gotten a lot better, with full randomization down to the kernel since El Capitan I think. Fixed page offsets (the worst offense imo) were also removed. Nice! I do think Apple was lagging behind but these days I suppose there would be parity for what have become basic features. I still think macOS should have some sort of MAC implementation though, but maybe they just need a little more time ;) [1] https://support.microsoft.com/en-us/windows/windows-desktop-apps-and-privacy-8b3b13bc-d8ff-5460-8423-7d5d5c1f6665 https://support.microsoft.com/en-us/windows/windows-desktop-...