Unauthorized Cross-App Resource Access on MAC OS X and iOS · HackerPapers discussions

Unauthorized Cross-App Resource Access on MAC OS X and iOS — mentioned by ikeboy

Wed, 02 Mar 2016 19:48:42 GMT

http://arxiv.org/abs/1505.06836 You can run as a regular user (or even sandboxed) and connect to the interface without authentication.

Paper and discussion history. A mention is not an endorsement.

Unauthorized Cross-App Resource Access on MAC OS X and iOS — mentioned by ikeboy

Wed, 02 Mar 2016 19:44:12 GMT

http://arxiv.org/abs/1505.06836 Other non root apps can masquerade as the app intended to get the data, and if it's sent in plaintext, they get information they wouldn't if it used a shared key accessible to the intended app.

Paper and discussion history. A mention is not an endorsement.

Unauthorized Cross-App Resource Access on MAC OS X and iOS — mentioned by ikeboy

Wed, 02 Mar 2016 19:31:00 GMT

On a quick look this seems to be the same as the vuln discussed in http://arxiv.org/abs/1505.06836. 1Password responded in a blog post here https://blog.agilebits.com/2015/06/17/1password-inter-proces...

Paper and discussion history. A mention is not an endorsement.

Unauthorized Cross-App Resource Access on MAC OS X and iOS — mentioned by SlashmanX

Wed, 17 Jun 2015 12:06:55 GMT

The paper in question: http://arxiv.org/abs/1505.06836

Paper and discussion history. A mention is not an endorsement.

Unauthorized Cross-App Resource Access on MAC OS X and iOS — HN submission

Wed, 17 Jun 2015 10:33:29 GMT

Unauthorized Cross-App Resource Access on Mac OS X and iOS

78 points; 10 discussion replies on HN. Paper and source history. A submission is not an endorsement.