Here's my writeup of a simple environment variable logic issue that allows for completely bypassing the Transparency, Consent, and Control (TCC) Framework on OS X: medium.com/@mattshockl/cv…

Awesome writeup on bypassing TCC medium.com/@mattshockl/cv…

📝 new (guest) blog post: "CVE-2020–9934: Bypassing TCC ...for unauthorized access to sensitive user data" 🔗 objective-see.com/blog/blog_0x4C… ✍️ by: Matt Shockley (Matt Shockley) "...and then directly modify the TCC database to give myself every TCC entitlement" ...no code required 🤩

mahalo to Matt Shockley for sharing the details of his lovely TCC bypass vulnerability! 🙏

Bla bla bla “C insecure” bla bla bla “use [insert fashionable secure language]” “Hi! How are you? I’m your remote repository you are trusting blindly during the build process!”

Seeing all of these great blog posts make me regret not giving CVE-2020-9934 a cool name! Maybe $HOMERun?

ARE YOU SMARTER THAN THE AVG CS MAJOR? Introducing Leetle. (leetle DOT app) Leetcode meets Wordle. 6 test cases. 6 attempts. + it’s timed. Daily Python Challenges. Forever. Optimized for Mobile Coding. Your first challenge? FizzBuzz.

wts.dev/posts/tcc-who/ It's a write-up a year in the... waiting. Enjoy everyone!