4 ms·
If it can open and write any file on the OS, it's pretty much game over. Too many ways to exfiltrate data even without network/socket access.
by lxgr 1y ago
If it can open and write any file on the OS, it's pretty much game over. Too many ways to exfiltrate data even without network/socket access.
- HSO 1y agoWorse, what keeps this from editing the config files for Little Snitch (or similar blockers)?
- TomaszZielinski 1y agoI believe LS has some protections against this. Never tried them, but there are config related security options, incl. protection against synthetic events. So they definitely put some thought into that.
- 4ndrewl 1y agoFile system permissions?