Timm Kandziora

@biscoditch

Philosopher, writer and developer.

Tyskland
shinvou.org
Joined October 2013
88 Photos and videos Photos and videos

Tweets

You blocked @biscoditch

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @biscoditch

  1. Aug 5

    Does anyone know how to catch signals while using NSRunLoop?

    1 reply 1 like
    Undo
  2. Jul 17

    This also happens in b4.

    Undo
  3. Jul 17

    In b4, es_mute_process and es_unmute_process finally talk to EndpointSecurity.kext. Also, es_muted_processes is new.

    Undo
  4. Jul 17

    Can I have Xcode 11 b4 please?!

    2 likes
    Undo
  5. Jul 5

    Some great slides in there!

    All dead links fixed on , uploaded some new papers. Still need to find a solution to add a changelog :-/
    1 like
    Undo
  6. Jul 4

    I just updated for beta 3. In b3, edit the TCC database to get EndpointSecurity working.

    1 like
    Undo
  7. Jul 3

    In b3 some stuff with EndpointSecurity changed, can’t connect to IOService anymore (no permissions). Don’t know y tho, IOService::newUserClient seems identical in EndpointSecurity.kext.

    1 like
    Undo
  8. Jun 19

    Well actually I just found out you can link against libEndpointSecurity.tbd. 🤦‍♂️I just didn’t discover it. I’ll correct the README on the github repo I posted earlier.

    1 like
    Undo
  9. Jun 19

    Yo I released where I also explain stuff about EndpointSecurity and how to use it on macOS 10.15 b2.

    Undo
  10. Jun 18

    Responding to auth events, means allowing or denying events, also work with EndpointSecurity. Enough digging for today …

    Undo
  11. Jun 18

    I may or may not write a blog post about EndpointSecurity framework. There’s little to no documentation up and it may help someone. :p Up to this point I really like that you can run these kind of tools in userland.

    Undo
  12. Jun 18

    Yea, so EndpointSecurity is mostly working in Catalina b2. And you don’t need to load it via the SystemExtension API, you’ll need an entitlement tho.

    Undo
  13. Jun 18

    Well, who need system extensions anyway? 😏

    1 like
    Undo
  14. Jun 18

    TIL about isatty(3).

    Undo
  15. Jun 18

    Awesome!

    [BLOG+TOOL] LLDBagility: practical macOS kernel debugging: An alternative to classic macOS kernel debugging based on virtual machine introspection based on Fast Debugging Protocol (FDP)
    Undo
  16. Jun 18

    EndpointSecurity seems to work in b2. :)

    1 reply
    Undo
  17. Jun 18

    Did /usr/lib/libEndpointSecurity.dylib exist before? Don’t think so. :)

    Undo
  18. Jun 18

    Can’t get system extensions to work in b2. Always getting "Extension not found in App bundle" while it's definetly there. Damnit.

    Undo
  19. Jun 13

    I’ll work on Dissident next week, I’ll promise guys.

    3 replies 1 retweet 5 likes
    Undo
  20. Jun 13

    Awesome, launch storyboards also work with dark mode.

    2 replies 1 like
    Undo

@biscoditch hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·