Getting Root with Benign AppStore Apps
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A researcher's write-up walks through discovering dylib hijacking flaws in macOS apps, using Patrick Wardle's scanner to find weak-loaded and rpath-dependent libraries that an attacker can replace with a malicious one.