logoalt Hacker News

brigade • today at 2:36 PM • 2 replies • view on HN

Which system integrity protection are you worried about missing? Muse being able to exfiltrate the contents of your messages db doesn’t compromise system integrity to begin with. It being able to write arguably does, but this whole conversation was about how to grant it full disk access in the future anyway.

And OP had SIP enabled, but his system still got compromised with a remote exploit.


Replies

throw0101a • today at 3:01 PM

AIUI, SIP protects "/" but not "/Users" (macOS' $HOME base). All your private data is in $HOME, so that's why Muse could get it even with SIP.

➕ show 2 replies
lapcat • today at 3:59 PM

> Muse being able to exfiltrate the contents of your messages db doesn’t compromise system integrity to begin with.

I care more about the integrity of my personal privacy than I do about the integrity of the "system". The point of the system is to serve me.

> And OP had SIP enabled, but his system still got compromised with a remote exploit.

Nobody said that SIP magically prevents macOS bugs and security vulnerabilities.

➕ show 1 reply