[0day] Mojave's Sandbox is Leaky
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Objective-See's researcher Patrick Wardle reports a sandbox bypass in macOS (tested on the latest version as of November 2018) that lets sandboxed apps still globally monitor distributed notifications, which Apple's sandbox is supposed to block.