328 karma · joined February 5, 2021
> As it turned out, this behavior is on purpose. There’s an explicit whitelist that allows certain macOS services to bypass any third party firewalls and to communicate on the Internet without being even noticed by the user. A hole in the wall.
Was remediated later, but shows there is precedent.
There's a bunch of other private frameworks (SafariCore.framework, SafariFoundation.framework, SafariPlatformSupport.framework, SafariShared.framework, SafariSharedUI.framework, SafariSwift.framework) as well. I haven't checked but I assume it's similar on iOS.
IIRC it was actually this Windows port of Toolbox that in some ways laid the foundation for Carbon - i.e. a port of the Toolbox API to what became Mac OS X.
https://en.wikipedia.org/wiki/HarmonyOS_NEXT https://www.usenix.org/conference/osdi24/presentation/chen-h...