▲ 72 ▼ Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner (thehackernews.com) submitted 2 months ago by halezinflames@lemmus.org to c/technology@lemmy.world 14 comments fedilink hide all child comments Well I guess I'm eating crow for suggesting MacOS was secure. JESUS lmfao, this one is nasty. "Would Rust have solved this" oops, nope
[–] eurodyne@piefed.world 3 points 2 months ago (3 children) Yeah, that too. permalink fedilink source parent hideshow 3 child comments replies: [–] halezinflames@lemmus.org [S] 1 point 2 months ago (2 children) It is really scary navigating, but I'm hoping being careful is still enough for most of what I do. permalink fedilink source parent hideshow 2 child comments replies: [–] eurodyne@piefed.world 2 points 2 months ago* (1 child) These sorts of attacks rely on a person finding themselves in a pretty shady situation already. You would have had to responded to some shady Web link or some shady email, and already clicked on a few shady links to get to the point where you were screen sharing with some bad actor somewhere. This exploit would have to be run on someone who was already pretty far down the rabbit hole. If you’re pretty careful, you would never get started in the first place. In fact, sometimes you will see these reports, and it turns out that these exploits exist only in a lab where they tested it, and haven’t been discovered in the real world permalink fedilink source parent hideshow 1 child comment replies: [–] halezinflames@lemmus.org [S] 1 point 2 months ago Yeah hopefully you're right. Just a lot of scary reports all around compounded with threats I have already received personally. permalink fedilink source parent
[–] halezinflames@lemmus.org [S] 1 point 2 months ago (2 children) It is really scary navigating, but I'm hoping being careful is still enough for most of what I do. permalink fedilink source parent hideshow 2 child comments replies: [–] eurodyne@piefed.world 2 points 2 months ago* (1 child) These sorts of attacks rely on a person finding themselves in a pretty shady situation already. You would have had to responded to some shady Web link or some shady email, and already clicked on a few shady links to get to the point where you were screen sharing with some bad actor somewhere. This exploit would have to be run on someone who was already pretty far down the rabbit hole. If you’re pretty careful, you would never get started in the first place. In fact, sometimes you will see these reports, and it turns out that these exploits exist only in a lab where they tested it, and haven’t been discovered in the real world permalink fedilink source parent hideshow 1 child comment replies: [–] halezinflames@lemmus.org [S] 1 point 2 months ago Yeah hopefully you're right. Just a lot of scary reports all around compounded with threats I have already received personally. permalink fedilink source parent
[–] eurodyne@piefed.world 2 points 2 months ago* (1 child) These sorts of attacks rely on a person finding themselves in a pretty shady situation already. You would have had to responded to some shady Web link or some shady email, and already clicked on a few shady links to get to the point where you were screen sharing with some bad actor somewhere. This exploit would have to be run on someone who was already pretty far down the rabbit hole. If you’re pretty careful, you would never get started in the first place. In fact, sometimes you will see these reports, and it turns out that these exploits exist only in a lab where they tested it, and haven’t been discovered in the real world permalink fedilink source parent hideshow 1 child comment replies: [–] halezinflames@lemmus.org [S] 1 point 2 months ago Yeah hopefully you're right. Just a lot of scary reports all around compounded with threats I have already received personally. permalink fedilink source parent
[–] halezinflames@lemmus.org [S] 1 point 2 months ago Yeah hopefully you're right. Just a lot of scary reports all around compounded with threats I have already received personally. permalink fedilink source parent