Top all-time · #7587
truesecdev.wordpress.com
Company blog · truesecdev.wordpress.comsecurityprogramming
truesecdev.wordpress.com is the company blog at truesecdev.wordpress.com, writing about security and programming. Since 2015, 10 different Hacker News readers have linked it 10 times, most often “Hidden backdoor API to root privileges in Apple OS X”. The last post was in 2017, but the archive is still widely read.
Too few sampled comments (7) to say how often HN recommends it.?
Why HN links it
HN readers cite TrueSec's 2015 post on a hidden macOS root-access backdoor when discussing Apple's patching of that bug and later macOS vulnerabilities. Comments use it as a source, not as a judgement of the writing.
Summarised by Claude from a sample of 7 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Hidden backdoor API to root privileges in Apple OS X8 people · 8 mentions · first linked 2015-04-09
What Hacker News says?
I haven't checked Apple's "security content" KB articles recently, but I remember that the fix for this bug was not backported at the time: https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-...
Comment linking /2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/
on “MacOS Update Accidentally Undoes Apple's “root” Bug Patch”Submitted Hidden backdoor API to root privileges in Apple OS X as a story · 920 points
HN discussionSpecifically, OS X Yosemite v10.10.3 and Security Update 2015-004 Admin Framework Available for: OS X Yosemite v10.10 to v10.10.2 CVE-2015-1130 : Emil Kvarnhammar at TrueSec https://support.apple.com/en-gb/HT204659 https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-... Are they backporting this?
Comment linking /2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/
on “Microsoft to stop producing Windows versions”Submitted Exploiting rootpipe again as a story · 4 points
HN discussionSure. https://www.cvedetails.com/product/156/Apple-Mac-Os-X.html?v... https://www.cvedetails.com/product/32238/Microsoft-Windows-1... https://www.cvedetails.com/product/17153/Microsoft-Windows-7... But everyone here is already thinking about the string of recent macOS vulnerabilities. Even just in the past few months Apple has been hit by a bunch of fairly major vulnerabilities while Windows hasn't been in the news…
Comment linking /2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/
on “AMD ships microcode update to disable some branch prediction”Submitted Security vulnerabilities in Evoko room booking display as a story · 2 points
HN discussionApple refuses to fix a critical security vulnerability[0] in non-Yosemite versions of OS X [0] https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-...
Comment linking /2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/
on “Apple OS X El Capitan”Agree completely. To take it a step further - even if you assume that you have all of the above locked down and have inspected all of your servers - someone still has to connect to those servers. Let's assume they are connecting using an iOS device or OSX on a Mac to run commands on the server. As everyone knows, Apple devices allow full root access from the cloud for Apple to install new applications etc. These sam…
Comment linking /2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/
on “Gigabytes of user data from hack of Patreon donations site dumped online”I don't know what Librem 5 will offer in the end, but I think your response argues a false dichotomy with zero evidence. There is no "automated transparent and trusted global support infrastructure [...that requires] zero user interaction" for anything and (given how we improve things in real life) apparently such a thing is unnecessary. If you want to know how something works, you either learn how it works and do t…
Comment linking /2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/
on “End of Year Librem 5 Update”Not quite compatible with a recently released vulnerability affecting 10.10.2-. Like a choice between eating and being eaten. https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-...
Comment linking /2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/
on “OS X 10.10.3 seems to have done something bad to wifi drivers”