{"id":342874,"date":"2021-09-22T23:09:14","date_gmt":"2021-09-22T20:09:14","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/hackers-have-already-bypassed-apples-emergency-macos-security-fix-review-geek\/"},"modified":"2021-09-22T23:09:14","modified_gmt":"2021-09-22T20:09:14","slug":"hackers-have-already-bypassed-apples-emergency-macos-security-fix-review-geek","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/hackers-have-already-bypassed-apples-emergency-macos-security-fix-review-geek\/","title":{"rendered":"#Hackers Have Already Bypassed Apple\u2019s Emergency macOS Security Fix \u2013 Review Geek"},"content":{"rendered":"

“#Hackers Have Already Bypassed App<\/a>le\u2019s Emergency macOS Security Fix \u2013 Review Geek”<\/strong><\/p>\n

\n
\"The
Apple<\/span><\/figcaption><\/figure>\n

Apple recently patched a critical macOS vulnerability that lets hackers run arbitrary code through email attachments. Unfortunately, this patch is sloppy and extremely easy to bypass. Mac owners should avoid opening email attachments with the inetloc extension until Apple issues a proper fix.<\/p>\n

Internet shortcut files, called inetloc files on macOS, are meant to redirect users to webpages. You can create an inetloc file by dragging a URL to your desktop, for example. But because of a bug in macOS, hackers can embed usable code within inetloc files. This code runs without warning when an affected file is opened, providing an easy way to attack macOS users via email.<\/p>\n

Programming the exploit requires little computing experience. See, inetloc files contain URLs, which usually begin with http:\/\/<\/em> or https:\/\/<\/em>. But an oversight by Apple lets inetloc files point to file:\/\/<\/em> locations within your computer system. A small line of code within an inetloc file could let a hacker run software or malicious payloads on your system.<\/p>\n

Researcher Park Minchan discovered the exploit early this week. Apple quickly issued a patch after the vulnerability was reported by SSD Secure Disclosure<\/em><\/a>, though several tech outlets and security experts find that this patch isn\u2019t enough.<\/p>\n

As reported by Ars Technica<\/em><\/a>, the emergency patch issued by Apple prevents macOS from running inetloc files that begin with a file:\/\/<\/em> prefix. But the patch is case-sensitive. Replacing any part of file:\/\/<\/em> with a capital letter completely bypasses the fix.<\/p>\n

This is amateurish work from Apple. It\u2019s the kind of fix you\u2019d expect from an intern at a small company. And frankly, it\u2019s a worrying sign that Apple doesn\u2019t take security as seriously as it claims. I guess that\u2019s why we haven\u2019t seen the \u201cwhat happens on your iPhone stays on your iPhone\u201d billboard in a while.<\/p>\n

Source: Ars Technica<\/a>, Apple Insider<\/a><\/small>\n<\/div>\n