Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Random tidbit: back when Mac OS X first mapped these bindings to Cocoa, it became possible to use them for evil -- to exploit OS X to grant access it wasn't supposed to. [1]

For example if you had a screensaver with a password prompt, you could type some characters, then: 1. ctrl-a 2. ctrl-k 3. ctrl-y ...repeat steps 1-3 several times and hit enter.

The screensaver would crash to desktop, or on the logon prompt, you'd crash to the console mode available by entering >console as a username.

I think these were largely patched by 10.3.0.[2]

[1] https://www.cnet.com/news/mac-os-x-screensaver-security-cras... [2] https://apple.slashdot.org/story/03/07/05/187203/screensaver...



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: