@theo With this government? It's really a toss-up. Sometimes things get thrown out quickly. Other times, it gets dragged on for a *while*. I honestly wasn't holding my breath for the former, so I'm not really surprised at all.
@gergely_kalman I think I tried it once before and, at the very least, it couldn't touch the TCC database directly (tried copying it to Desktop and back). But I never tried indirection.
@gergely_kalman To push back on my own point, getting access to the database file is arguably a full bypass, while others could be only partial. It's still a weird requirement, though, imo.
@gergely_kalman The TCC bypass guidelines explicitly say that, if you don't touch the database, you get less of a payout. Which I find odd, as it's the same impact anyway, but it's their program to run however they want.
@gergely_kalman I'd also be curious to see how it affects corporate IT admins, who may have scripts and such designed with the idea that that file is where it is and can be edited with Full Disk Access.
@gergely_kalman This is interesting, but it also will probably kill the last remaining bits of research into local logic attacks on macOS. Corrupting that database directly was one of the last remaining logic bugs that Apple actually payed somewhat well for. That, and Gatekeep bypasses, I guess.
This would never have been worth it when Arch was only used by “Arch people” (unemployed nerds)
Now that we’ve tricked normal people into using Arch, it is suddenly valuable as an attack surface
@theo I've been thinking a lot more recently about the tactics of threat actors and the values of attack surfaces. Things definitely seem to be shifting, and it's incredible to watch.
@theevilbit@zippgod24 Honestly, I think the timeline point here is a bit valid. Due to Apple's months-long release cadence, bugs take a while to have the patch in place. Other vendors have much quicker release cadences.
Our internal data shows Claude is accelerating AI development—a possible path to recursive self-improvement, or AI autonomously building a more capable successor.
It’s happening faster than we thought, and the implications deserve greater attention. anthropic.com/institute/recu…
@cultcrit@LouiseS1996@ShamashAran The command in the screenshot is (arguably) safe. But the more you get used to this, the easier it is for threat actors to trick you down the line with fake lookalike pages if you don't read the script every time you paste. And, as mentioned, they have been successful with that.
2K Followers 424 Followingprompt engineer for binaries | reverse engineer, exploit developer, equally bad at both | https://t.co/FJ88dlQw7W | mastodon: @[email protected]
former s.c
111 Followers 710 FollowingI play roblox and I love messing with Windows OS: Windows 10, Android 15, iPadOS 18.7.8 I help Asher get streams on @KreekVODArchive on yt ALT: @TrueRobloxPro
676 Followers 1K FollowingCreating assistive technologies | OVERSEER // ACK // NEON FLUX // VITALITY.SYS // Protocol: Hydration | Cybersecurity hobbyist | I use X more as a dev log
39 Followers 1K FollowingSeek and destroy threats | I will find your malware and take down it | DM for Study together | I do not use Twitter so much | him, his | @Intelis_ABIN Agent/SEC
536 Followers 426 Followingmusician turned infosec analyst. premium goofs as a service. my employer has no clue this account exists but my thoughts are my own.
2K Followers 91 FollowingFounded by @LambdaMamba & @cybersyrupblog | Run by World Cyber Health Non-Profit | Discord: https://t.co/JE25nRRco6 | Email: [email protected]
5K Followers 1K FollowingSweeping the floor at https://t.co/CM8ErzxC5z (we are hiring). Previously at Microsoft/Veramine/Apple. author of Practical Reverse Engineering.
388 Followers 237 FollowingEngineer, thinker, procrastinator, idealist. Too many projects, not enough time. He/him. Currently @warpdotdev; formerly @youtube, @gmail.
1K Followers 16 FollowingWhat if the world's best hackers rebuilt AppSec from the ground up with AI?
Meet Xint - autonomous, comprehensive, fast, and actionable.
4K Followers 3K Following@missionbit board member. Former founder/CTO of Mochi Media and Fig. Sometimes enjoys writing code. he/him https://t.co/8VABmVoPGI & https://t.co/XjXgNrSq8s bsky