Michael Tsai
Adware Simulates Mouse Events to Access Keychain: http://mjtsai.com/blog/2015/09/02/adware-simulates-mouse-events-to-access-keychain/ … #mjtsaiblog
Rosyna Keller
-
-
@rosyna So it's not just using the Accessibility access in the Privacy pref pane? -
@mjtsai It requires admin credentials in order to approve a new app for assistive access. This malware asks for it.https://twitter.com/rosyna/status/639295619522125824 …
- View other replies
-
@mjtsai That is, it gets the admin's username and password before it ever even tries to show the keychain dialog. -
@mjtsai And the WindowServer won't forward even events (even mouse clicks) sent by one app to another unless the first has assistive access. -
@mjtsai This change was made in 10.9, FWIW. https://support.apple.com/en-us/HT202802 -
@mjtsai Sigh, that article mentions a workaround that stopped functioning in 10.9.5. https://developer.apple.com/library/prerelease/mac/technotes/tn2206/_index.html#//apple_ref/doc/uid/DTS40007919-CH1-TNTAG205 …
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.