Who Moved My Pixels?!
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A guest post by security researcher Mikhail Sosonkin reverse-engineers macOS's built-in screencapture utility to show how it captures desktop pixels: it traces from command-line parsing to CoreGraphics' CGDisplayCreateImage, which resolves at runtime to SkyLight's SLSHWCaptureDesktop, and then uses Mach port IPC to fetch pixels from the GUI service.