Asia-24-Fitzl-Wojciech-Unlimited-ways-to-bypass-your-macOS-privacy-mechanisms

#BHASIA @BlackHatEventsTHE FINAL*CHAPTERUNLIMITED WAYS TO BYPASS YOUR MACOS PRIVACY MECHANISMSCSABA FITZL & WOJCIECH REGUŁA# BHASIA @BlackHatEventsNSFullUserName() –Wojciech Reguła•Headof Mobile Security @ SecuRing•CertifiediOS Application Security Engineer(iASE) author•Focusedon iOS/macOS #appsec•Blogger–https://wojciechregula.blog# BHASIA @BlackHatEventsNSFullUserName() –CsabaFitzl•Principal macOSSecurity Researcher@ Kandji•Formercreatorof macOSExploitation& PentestingTraining•Ex red/blueteamer•80+ CVEsfrom Apple•Blog: https://theevilbit.github.io/# BHASIA @BlackHatEventsOur previous Black Hat TCC talks# BHASIA @BlackHatEventsAgenda1.TCC / Privacy fundamentals (quick recap)2.TCC bypasses•Info leaks•Sysadminctl•com.apple.Safari.SandboxBroker•InstallAssistant.pkg•cpldiagnose•QuartzCoreframework•CFNetwork•REDACTED3.Dead and dying techniques4.TCC / Security improvements in macOS SonomaOpenAI: generatePolishand Hungariangrillinganapple# BHASIA @BlackHatEventsTCC / privacyfundamentals# BHA