71–80 of 84 posts
It doesn't log passwords using EnableSecureEventInput. There are probably other use cases, but Apple seems to have implemented things rather well here.
It doesn't log passwords using EnableSecureEventInput. There are probably other use cases, but Apple seems to have implemented things rather well here.
So are there any keyloggers for MacOS in the wild that still manage to capture keystrokes with EnableSecureEventInput, or can I consider this as "secure"? Also, is there a way to tell when/for which processes EnableSecureEventInput is active?
A good way to check whether EnableSecureEventInput is enabled is to start the Keyboard Viewer that comes with MacOS and see if it echoes keystrokes.
Earlier quoted context omitted.
So are there any keyloggers for MacOS in the wild that still manage to capture keystrokes with EnableSecureEventInput, or can I consider this as "secure"? Also, is there a way to tell when/for which processes EnableSecureEventInput is active?
Answering my own question: EnableSecureEventInput does not protect from processes that have root privileges, see https://security.stackexchange.com/questions/47749/how-secur... A good way to check whether EnableSecureEventInput is enabled is to start the Keyboard Viewer that comes with MacOS and see if it echoes keystrokes.
Earlier quoted context omitted.
Interesting anecdote. What did you end up doing? Did you just leave it as-was?
I guess he looked for key-up events.
Earlier quoted context omitted.
No. You could listen for the keydown, but you wouldn't hear it, so you may as well ignore what you can't hear.
You should get a key down event when moving into the password field since you're coming from a field which is not secure.
Earlier quoted context omitted.
It would be nice if macOS had the same permissions models as iOS, and then some. A permission before apps can access the camera, or access what keys are held down when the app isn't in the foreground - that would block this case.
Most applications can’t offer the functionality you expect without a great amount of permissions. New apps in the Mac App Store have to run in the sandbox and they are quite severely limited.
".. Heck, even the $300 chromebook we recently got has 16GB of RAM.. " I don't think sth like that exists.. which one is it?
Earlier quoted context omitted.
Not on ios though. See, the problem is not the permissions, but the fact you are at their mercy. And because by definition innovations assume you have nit thought of it before, this will limit innovation.
To m, that just shows that it's up to the implementation.
Earlier quoted context omitted.
There is also a reason I can do 99% of the things I do on a laptop on my (totally sandboxed, not rooted) iPad Pro.
No you can't. You just have a very limited way to use it. Even with the same screen size, give me a laptop os and i'll be more productive, with a factor of 10. It's not a figure of style. Phone os are terribly limited.