macOS Mojave contains a bug that makes it possible to find out the complete history of Safari

15. 2. 2019

macOS Mojave contains a security flaw that allows malware to discover the complete history of Safari. Mojave is the first ever operating system in which website history is protected, yet the protection can be bypassed.

In older systems, you could find this data in a folder ~/Library/Safari. Mojave protects this directory and you cannot display its contents even with a normal command in Terminal. Jeff Johnson, who developed applications such as Underpass, StopTheMadness or Knox, discovered a bug with which the content in this folder can be displayed. Jeff didn't want to make this method public and immediately reported the bug to Apple. However, he adds that Malware is able to violate user privacy and work with Safari history without major problems.

Enter the gallery

However, only applications that are installed outside the App Store can use the bug, as applications from the Apple Store are isolated and are not able to look into the surrounding directories. Despite this flaw, Johnson claims that protecting Safari's history is the right thing to do, because in older versions of macOS this directory was not protected at all and anyone could look into it. Until Apple issues a fix update, the best prevention is to only download apps you trust.

Source: 9to5mac

Topics: macOS Mojave, safari, 9to5mac, find, MacOS, App Store, app, user, Application, Apple Lossless Audio CODEC (ALAC),

Discussion of the article

Mikuláš Berka

15. 2. 2019 23:42

So let's stop being ashamed of porn?

Your name

Your comment

By filling in the above data, I acknowledge that the company TEXT FACTORY s.r.o., registered office in Brno, Durďákova 336/29, Černá Pole, ZIP code: 613 00, ID number: 06157831, registered at the Regional Court in Brno, section C, insert 100399, will process my personal data provided in the registration form filled out by me on the basis of the legitimate interests of TEXT FACTORY s.r.o. according to Article 6 paragraph 1 letter f) GDPR and to fulfill legal obligations (Article 6, paragraph 1, letter c) GDPR), for the following purposes: the necessity to ensure the authorization of visitors to websites operated by TEXT FACTORY s.r.o. to actively contribute to published articles or within discussion forums and exercising the rights of TEXT FACTORY s.r.o. as the administrator of these discussion forums. More information about the processing of personal data and rights can be found in Lessons on personal data protection. the entire text

It could be interest you

Gallery

Related