Absolute hacker news moment.
3 karma · joined March 28, 2021
Absolute hacker news moment.
Absolutely a security vulnerability, and while I havent reproduced on my own and am just going off what I read on the original Twitter thread (so it's possible I could be regurgitating bad info), my understanding is that it gives processes this access by listening to process creation and hashing the name. Meaning if I have a known hash from the list I can simply rename my program / malware and bam.
Eventually same or similar issue where it just wouldn't boot. I took it to Apple and they said they had to send it off somewhere else but they suspected gpu failure, they noticed some screen tearing and said they could do that for me no problem and warrantied it.
Got a call later that my MacBook had passed the gpu tests and they had to do more to figure out what was up. Another call and they said my MacBook had water damage and they wouldn't touch it. I called bs because they wouldn't have warrantied the screen if it had water damage, and also I babied the hell out of the thing. The person I was talking to said she was going to get to the bottom of it and would call back.
They replaced every component in the damn laptop, but only after it broke and they tried to take no fault. I'm never going to stop complaining about this experience but at least I still have this laptop for now
All of this is done behind the scenes though, so your average end user doesn't even notice.