Comment by lxgr

8 months ago

If it can open and write any file on the OS, it's pretty much game over. Too many ways to exfiltrate data even without network/socket access.

3 comments

lxgr

Reply
HSO  8 months ago

Worse, what keeps this from editing the config files for Little Snitch (or similar blockers)?

  • TomaszZielinski  8 months ago

    I believe LS has some protections against this. Never tried them, but there are config related security options, incl. protection against synthetic events. So they definitely put some thought into that.