Well I guess I'm eating crow for suggesting MacOS was secure. JESUS lmfao, this one is nasty.

"Would Rust have solved this" oops, nope

all 14 comments

sorted by: hot top controversial new old
[–] 17 points 2 months ago

Oh, it’s already been patched. Ok.

  • source
  • [–] 15 points 2 months ago (7 children)

    MacOs' greatest strength against malware was a small install base.

  • source
  • hideshow 7 child comments
  • [–] 10 points 2 months ago* (5 children)

    As more and more people flee windows and seek alternatives, expect to see this sort of thing to increase.

  • source
  • parent
  • hideshow 5 child comments
  • [–] [S] 10 points 2 months ago (4 children)

    Especially now with AI agents discovering vulnerabilities at a pretty insane pace

  • source
  • parent
  • hideshow 4 child comments
  • [–] 3 points 2 months ago (3 children)
  • [–] [S] 1 point 2 months ago (2 children)

    It is really scary navigating, but I'm hoping being careful is still enough for most of what I do.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 2 months ago* (1 child)

    These sorts of attacks rely on a person finding themselves in a pretty shady situation already. You would have had to responded to some shady Web link or some shady email, and already clicked on a few shady links to get to the point where you were screen sharing with some bad actor somewhere. This exploit would have to be run on someone who was already pretty far down the rabbit hole.

    If you’re pretty careful, you would never get started in the first place.

    In fact, sometimes you will see these reports, and it turns out that these exploits exist only in a lab where they tested it, and haven’t been discovered in the real world

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 2 months ago (1 child)

    Who in their right mind is exposing them directly to the internet? Poorly configured routers to blame here I assume?

  • source
  • hideshow 1 child comment
  • [–] 1 point 2 months ago

    I haven’t seen full details on this yet but I’m curious how much of this is UPnP type situations. Routers have been doing much better with it being disabled by default compared to past however.

  • source
  • parent
  • [+] -8 points 2 months ago (2 children)

    Good for the Monero miner.

    They can earn some money off of idiots.

  • source
  • hideshow 2 child comments
  • [–] 4 points 2 months ago (1 child)

    How are people idiots for screen sharing with zoom and getting hacked by something even Apple did not know about?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 2 months ago

    […] screen sharing with zoom

    It’s a bit more nuanced than that and most casual users likely are not vulnerable to this exploit:

    […] requires the target Mac to have Screen Sharing or Remote Management enabled with "VNC viewers may control screen with password" configured and the attacker is already in possession of that VNC password

    Regardless, victim blaming is still lame

  • source
  • parent
  • 1 comment in c/cybersecurity@sh.itjust.works view that post
    [–] 1 point 2 months ago

    At least it'll power the monero blockchain

  • source