Broken Isolation: Draining Credentials from Popular macOS Password Managers
Objective-See Foundation via YouTube
AI Engineer - Learn how to integrate AI into software applications
AI, Data Science & Cloud Certificates from Google, IBM & Meta
Overview
Google, IBM & Meta Certificates – 40% Off
One plan covers every Professional Certificate on Coursera.
Unlock All Certificates
Explore a security-focused conference talk that reveals critical vulnerabilities in macOS password managers through an examination of isolation enforcement weaknesses. Delve into how basic isolation assumptions can be exploited, as security expert Wojciech Regula demonstrates various techniques and zero-day vulnerabilities that allow low-privileged malware to compromise popular password management applications. Learn about the theoretical foundations of macOS application isolation through notarization and sandboxing, and understand why these security measures often prove ineffective in practice. Gain insights from Regula's extensive experience in Apple device security, including his work as Principal IT Security Specialist at SecuRing and his contributions to platforms like iOS Security Suite. The 28-minute presentation includes detailed technical analysis supported by comprehensive slides, making it valuable for security professionals and developers interested in macOS application security.
Syllabus
OBTS v7 "Broken isolation: Draining your Credentials from Popular macOS Password Managers" W. Regula
Taught by
Objective-See Foundation