macOS application isolation and its exploitation
summary
Examines macOS sandboxing and notarization weaknesses by demonstrating how malicious apps can still exfiltrate data from password managers. Describes specific attack techniques against Apple’s protections to show that sandbox and notarization do not fully prevent data theft.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 4:38macOS is not Linux
- 10:59System Integrity Protection
- 23:01Hardened Runtime and notarization
- 30:13Password manager attacks
- 43:14Summary
related talks
42mBypassing macOS Security and Privacy Mechanisms: From Gatekeeper to System Integrity Protectio
51mAll Your Macs Are Belong To Us ... Again!
36mmacOS Vulnerabilities Hiding in Plain Sight
54mmacOS: Tracking High Profile Targeted Attacks, Threat Actors & TTPs
43mFrom u0 to Millionaire - Attacking Interprocess Communication...
37mOutsmarting Hackers before your App gets pwn'ed
47mSecurity Threats & Mitigations for iOS Developers
27miOS Attack Vectors and how to protect your app