Hacker News Reader

I agree with my sibling comments that in current OSs, desktop apps — especially ones with root — are generally as privileged as the user, and that's (supposed to be!) a good thing.

However, Chrome's AppleScript support was used almost exclusively by malware, so it's disabled by default now: https://crbug.com/661810.

View on HN

If Apple had invested as much in AppleScript as other parts of the OS I’m sure we’d see a ‘Can automate other applications’ setting in the Privacy controls. Not sure that’d help much here as the app is a Trojan but it’d be helpful to limit the activity while removing it.

We have one, to an extent. AppleScript is supposed to be IPC, so the published interfaces for AppleScript are governed by the applications responding to the requests. However, the generic "simulate human input" response is restricted using the "Allow these apps to control your computer" setting in System Preferences -> Security & Privacy -> Privacy -> Accessibility.

Reply on news.ycombinator.com