Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Swift-Keylogger – Keylogger for MacOS written in Swift using HID

github.com

Post reply on HN
Print view View original

61–70 of 84 posts

Re: Swift-Keylogger – Keylogger for MacOS written in Swift using HID

#61

Post by jwandborg »

Void_ wrote: post #24
jwandborg wrote: post #22

Earlier quoted context omitted.

S?he probably listened to the keyup event instead.

His name is Dan ...

- I did not read their username.

- I did not click through to their profile.

The cause for both of these is that my mobile HN experience is horrible for me (a lazy person).

I spent a few seconds looking for a word to replace "She/He", when none came to mind I fell back to a regular expression[1]. As iaml pointed out[2] (along with others) https://en.wikipedia.org/wiki/Singular_they is the proper solution to this issue, and I will try to remember that in the future.

---

[1] as we so often do in our daily lives.

[2] https://news.ycombinator.com/item?id=15489652

---

In my second attempt at comedy today, Trying to perform the error-prone art of interpreting genders based on usernames, the best I came up with for you is

    /^\0_$/
Feedback welcome, this is my first attempt at matching null in a regular expression.

I'll explain the joke, so that no-one feels left out: I interpret name "Void" as gender "null", then carry the underscore over, using artistic license, to make the regex more interesting.

Re: Swift-Keylogger – Keylogger for MacOS written in Swift using HID

#62

Post by sametmax »

BoorishBears wrote: post #60
sametmax wrote: post #41

Earlier quoted context omitted.

That's not the problem. The problem is that the whitelist of permissions is limited, fixed, i have no control over it and i can't easily work around it. I can't create a great way to batch install/update/migrate my phone because everything requires manual approval. I can't use my own browser or sms app on ios cause it's not allowed by the permissions system. I can't install a new driver on my phone. Remember the bs u…

On Android you can batch install while granting all permission with the `-g` argument on Android versions with runtime permissions

Not on ios though. See, the problem is not the permissions, but the fact you are at their mercy. And because by definition innovations assume you have nit thought of it before, this will limit innovation.

Re: Swift-Keylogger – Keylogger for MacOS written in Swift using HID

#63

Post by jwandborg »

kupiakos wrote: post #32
novium wrote: post #27

Earlier quoted context omitted.

Still not a reason to assume things here.

Should just default to the singular they then.

My fault. I'm more comfortable with regular expressions than the English language.

Re: Swift-Keylogger – Keylogger for MacOS written in Swift using HID

#64

Post by jwandborg »

iaml wrote: post #38
jwandborg wrote: post #22

Earlier quoted context omitted.

S?he probably listened to the keyup event instead.

https://en.wikipedia.org/wiki/Singular_they

Thank you, that is much better than

    /S?he|\w+kin|.*/
This irrational regular expression is an attempt at comedy.

On a serious note, I was looking for that word, but failed to remember it[0].

[0] https://news.ycombinator.com/item?id=15490542

Re: Swift-Keylogger – Keylogger for MacOS written in Swift using HID

#65

Post by eradicatethots »

jwandborg wrote: post #63
kupiakos wrote: post #32

Earlier quoted context omitted.

Should just default to the singular they then.

My fault. I'm more comfortable with regular expressions than the English language.

Is it just me or is none of this a big deal?

Re: Swift-Keylogger – Keylogger for MacOS written in Swift using HID

#66

Post by PhisherPrice »

dannyw wrote: post #3
xchaotic wrote: post #2

It doesn't log passwords using EnableSecureEventInput. There are probably other use cases, but Apple seems to have implemented things rather well here.

It would be nice if macOS had the same permissions models as iOS, and then some. A permission before apps can access the camera, or access what keys are held down when the app isn't in the foreground - that would block this case.

However, macOS gives the user root access. This allows malware to elevate privileges by using a vulnerability or phishing for the password or elevation prompt. Once root, everything can be keylogged, even passwords.

Re: Swift-Keylogger – Keylogger for MacOS written in Swift using HID

#67

Post by Gaelan »

nfoz wrote: post #15
dannyw wrote: post #3

Earlier quoted context omitted.

It would be nice if macOS had the same permissions models as iOS, and then some. A permission before apps can access the camera, or access what keys are held down when the app isn't in the foreground - that would block this case.

Yes, it would be very nice if operating systems had a sane (let alone user-friendly!) way to properly, thoroughly sandbox userland applications. It's a large reason why "web applications" became a thing -- it gives you sandboxed remote programs (and easy-access to boot!) Even if the web-browsing sandbox is flawed, it's been a convenient band-aid over a fundamental OS feature that, sadly, still doesn't properly exist.

macOS has sandboxed apps, with the same underlying model as iOS (not sure if it asks for camera permissions and such, but apps declare a list of “entitlements” and are granted only those). It’s required for App Store apps, but other than that it’s opt-in. Outside of the App Store, basically it’s just something like DEP or ASLR: a mitigation that isn’t really visible to users unless they look for it.

Re: Swift-Keylogger – Keylogger for MacOS written in Swift using HID

#68

Post by BoorishBears »

sametmax wrote: post #62
BoorishBears wrote: post #60

Earlier quoted context omitted.

On Android you can batch install while granting all permission with the `-g` argument on Android versions with runtime permissions

Not on ios though. See, the problem is not the permissions, but the fact you are at their mercy. And because by definition innovations assume you have nit thought of it before, this will limit innovation.

To m, that just shows that it's up to the implementation.

Re: Swift-Keylogger – Keylogger for MacOS written in Swift using HID

#70

Post by splicer »

xchaotic wrote: post #2

It doesn't log passwords using EnableSecureEventInput. There are probably other use cases, but Apple seems to have implemented things rather well here.

Thanks to a vulnerability I reported a decade ago: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0724
Post reply on HN