Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption... show more

Mysk 🇨🇦🇩🇪

20,857 subscribers

86,924 views • 2 months ago •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. With this macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy)

Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. With this macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy)

Mysk 🇨🇦🇩🇪

125,070 views • 2 months ago

🚨PSA: If you think you're a targeted individual, don't install macOS apps from the web. macOS code signing and TCC are broken. We accidentally found a bug that lets any command modify the binaries of other apps, including Signal, Brave, Chrome, and even Xcode. Watch the demo👇 This happens entirely in the background, with no password prompts or visible alerts. The modified binaries can then access the original app's keychain records and protected containers. We reported this to Apple two weeks ago and haven't received a response. We previously said we wouldn't contact Apple's bounty program again, but we believe it's necessary in this case to help protect Mac users. It affects macOS 26 and 27. This bug doesn't impact apps downloaded from the Mac App Store. Many developers distribute apps on the web instead because Apple controls the App Store's review process and payment methods.

🚨PSA: If you think you're a targeted individual, don't install macOS apps from the web. macOS code signing and TCC are broken. We accidentally found a bug that lets any command modify the binaries of other apps, including Signal, Brave, Chrome, and even Xcode. Watch the demo👇 This happens entirely in the background, with no password prompts or visible alerts. The modified binaries can then access the original app's keychain records and protected containers. We reported this to Apple two weeks ago and haven't received a response. We previously said we wouldn't contact Apple's bounty program again, but we believe it's necessary in this case to help protect Mac users. It affects macOS 26 and 27. This bug doesn't impact apps downloaded from the Mac App Store. Many developers distribute apps on the web instead because Apple controls the App Store's review process and payment methods.

Mysk 🇨🇦🇩🇪

137,610 views • 2 months ago

Sen. Kelly: "This is a fundraising email from POTUS…It says 'As a national security briefing measure you'll receive my private national security briefings.'…Do you think supporters of the president should be able to pay and receive his private national security briefings?" Ratcliffe: "The Hatch Act would prevent me, in an apolitical role, from engaging in that. I'm not aware that anything like that happened." Kelly: "Director Gabbard, do you have any comment on whether unfiltered updates of private national security briefings should be made to individuals that donate to the president?" Gabbard: "I'm not familiar with that document."

Sen. Kelly: "This is a fundraising email from POTUS…It says 'As a national security briefing measure you'll receive my private national security briefings.'…Do you think supporters of the president should be able to pay and receive his private national security briefings?" Ratcliffe: "The Hatch Act would prevent me, in an apolitical role, from engaging in that. I'm not aware that anything like that happened." Kelly: "Director Gabbard, do you have any comment on whether unfiltered updates of private national security briefings should be made to individuals that donate to the president?" Gabbard: "I'm not familiar with that document."

The Bulwark

19,729 views • 6 months ago

🚨 Here's a good wake up call for all of us. Are you listening? U.S. Treasury Secretary Janet Yellen states that "This is not theft. There is no legal issue" in stealing Russian sovereign assets since "the assets generated income for the institution". Using the same logic, interest income earned on an any investment held at a financial institution, or even a savings account, could be taken from you because the "institution" considers it to be its "income", not yours.

🚨 Here's a good wake up call for all of us. Are you listening? U.S. Treasury Secretary Janet Yellen states that "This is not theft. There is no legal issue" in stealing Russian sovereign assets since "the assets generated income for the institution". Using the same logic, interest income earned on an any investment held at a financial institution, or even a savings account, could be taken from you because the "institution" considers it to be its "income", not yours.

Lena Petrova

443,332 views • 2 years ago

Last year they hosted Chainlink, who had a hackathon, an Arbitrum track, and a track with Ethereum Foundation. It’s important to note that the focus is on open source technology, including but not exclusively Web3. Mario Behling says, “From a technology point of view, we don't distinguish so much because, of course, in the blockchain world, in the web three world, we're using Python, using JavaScript, we're using technologies to build the next generation of the web”

Last year they hosted Chainlink, who had a hackathon, an Arbitrum track, and a track with Ethereum Foundation. It’s important to note that the focus is on open source technology, including but not exclusively Web3. Mario Behling says, “From a technology point of view, we don't distinguish so much because, of course, in the blockchain world, in the web three world, we're using Python, using JavaScript, we're using technologies to build the next generation of the web”

Bitcoin.com News

17,411 views • 1 year ago

Kelly: This is a fundraising email from the president—it says as a national security briefing member, you'll receive my private national security briefings. Do you think supporters of the president should be able to pay and receive his private national security briefings? Ratcliffe: It didn’t happen… Kelly: This says unfiltered updates Gabbard: I’m not familiar with that document Kelly: We’ll get you a copy

Kelly: This is a fundraising email from the president—it says as a national security briefing member, you'll receive my private national security briefings. Do you think supporters of the president should be able to pay and receive his private national security briefings? Ratcliffe: It didn’t happen… Kelly: This says unfiltered updates Gabbard: I’m not familiar with that document Kelly: We’ll get you a copy

Acyn

96,461 views • 6 months ago

In this simple example, we show that Claude Code can read the iMessage database on the latest version of macOS, even with a leading EDR running on the system, illustrating the impact of an adversary who can remotely control the agent. We do this using Terminator, an internal research tool we built while studying the security implications of computer use agents. In this setup, the terminal application has previously been granted FDA, a subtle misconfiguration that effectively gives the agent access to unexpected context.

In this simple example, we show that Claude Code can read the iMessage database on the latest version of macOS, even with a leading EDR running on the system, illustrating the impact of an adversary who can remotely control the agent. We do this using Terminator, an internal research tool we built while studying the security implications of computer use agents. In this setup, the terminal application has previously been granted FDA, a subtle misconfiguration that effectively gives the agent access to unexpected context.

Origin

18,004 views • 10 months ago

The Beholder is a new block that can be crafted with the drops of the Watcher. Using this block, you can remotely view any location within the same dimension - provided you have enough Occult Gems to support this security network...

The Beholder is a new block that can be crafted with the drops of the Watcher. Using this block, you can remotely view any location within the same dimension - provided you have enough Occult Gems to support this security network...

Alexander Mobiles 🐀🐀🐀

42,095 views • 3 years ago

Happy to release Maia SDR, an open-source FPGA-based SDR project focusing on the ADALM Pluto. This first release can display the waterfall on a web browser using WebGL2 and record in SigMF format, at up to 61.44 Msps. Here is a short demo, and some technical details. 🧵

Happy to release Maia SDR, an open-source FPGA-based SDR project focusing on the ADALM Pluto. This first release can display the waterfall on a web browser using WebGL2 and record in SigMF format, at up to 61.44 Msps. Here is a short demo, and some technical details. 🧵

Daniel Estévez

85,784 views • 3 years ago

I strongly condemn this. No matter the disagreement or provocation, we must desist from physically confronting or attempting to disarm men in uniform, especially armed security personnel. If there is misconduct by a police officer, there are lawful channels for addressing it. In this particular video, the officer is seen using a stick; he was not seen using the firearm. That makes the decision to disarm him even more concerning. Disarming an armed police officer is an extremely dangerous escalation that could have resulted in something far more tragic. This is not about defending misconduct by security personnel. If an officer acts wrongly, he should be held accountable through the appropriate authorities. But civilians must also understand the dangers of taking matters into their own hands. The government, especially the relevant security authorities, needs to take incidents like this seriously and ensure that both civilians and security personnel understand the boundaries of lawful conduct. We can do better as civilians. We can disagree without turning every disagreement into a physical confrontation. Condemn misconduct. Demand accountability. But do not escalate a situation involving an armed security officer unnecessarily.

I strongly condemn this. No matter the disagreement or provocation, we must desist from physically confronting or attempting to disarm men in uniform, especially armed security personnel. If there is misconduct by a police officer, there are lawful channels for addressing it. In this particular video, the officer is seen using a stick; he was not seen using the firearm. That makes the decision to disarm him even more concerning. Disarming an armed police officer is an extremely dangerous escalation that could have resulted in something far more tragic. This is not about defending misconduct by security personnel. If an officer acts wrongly, he should be held accountable through the appropriate authorities. But civilians must also understand the dangers of taking matters into their own hands. The government, especially the relevant security authorities, needs to take incidents like this seriously and ensure that both civilians and security personnel understand the boundaries of lawful conduct. We can do better as civilians. We can disagree without turning every disagreement into a physical confrontation. Condemn misconduct. Demand accountability. But do not escalate a situation involving an armed security officer unnecessarily.

Adeyemi_Oyero

318,503 views • 16 days ago

Putin to NATO Secretary General Mark Rutte: What nonsense is he saying? I'd really like to ask him: Listen, what are you saying about a war with Russia? You can read, right? Then read the new US National Security strategy. The USA is the key player in NATO, the main sponsor of NATO. Russia is not mentioned as an enemy [in the new security strategy]. But NATO Secretary General is getting ready for a war with us. What is that? You can read, can't you? How are you targeting NATO for a war with Russia if the main NATO country does not see us as an adversary and an enemy?

Putin to NATO Secretary General Mark Rutte: What nonsense is he saying? I'd really like to ask him: Listen, what are you saying about a war with Russia? You can read, right? Then read the new US National Security strategy. The USA is the key player in NATO, the main sponsor of NATO. Russia is not mentioned as an enemy [in the new security strategy]. But NATO Secretary General is getting ready for a war with us. What is that? You can read, can't you? How are you targeting NATO for a war with Russia if the main NATO country does not see us as an adversary and an enemy?

Anton Gerashchenko

532,560 views • 9 months ago

Ford has a security vulnerability that they are internally leaving unfixed so they can sell you the solution Their vehicles are vulnerable to a relay attack, that lets someone with a signal booster trick your vehicle into thinking they have the key fob Ford knows this works and your vehicle can be stolen, but instead of fixing the security issue they are charging customers $7.99 per month, that’s $96 per year to be protected from this hacking The security package even comes with stolen vehicle assist…. So they know that your vehicle can be stolen by this and they’ll assist and get it back… for a price There should be a lawsuit against Ford for this

Ford has a security vulnerability that they are internally leaving unfixed so they can sell you the solution Their vehicles are vulnerable to a relay attack, that lets someone with a signal booster trick your vehicle into thinking they have the key fob Ford knows this works and your vehicle can be stolen, but instead of fixing the security issue they are charging customers $7.99 per month, that’s $96 per year to be protected from this hacking The security package even comes with stolen vehicle assist…. So they know that your vehicle can be stolen by this and they’ll assist and get it back… for a price There should be a lawsuit against Ford for this

Wall Street Apes

483,624 views • 1 month ago

You do not have to read a research paper from start to end for the first pass. This is a huge academic misconception. There are key parts of a paper and a specific order that students should be taught. ▶️ Here's how to read a research paper quickly using AI:

You do not have to read a research paper from start to end for the first pass. This is a huge academic misconception. There are key parts of a paper and a specific order that students should be taught. ▶️ Here's how to read a research paper quickly using AI:

Amina Yonis, PhD

40,764 views • 3 years ago

"If you take a step back: Israel is bombing Lebanon all the time. Shouldn't the Lebanese government also want to have a degree of deterrence to make sure that the Israelis at least have to think twice before they strike Lebanon? But that's not part of the American paradigm. The American paradigm, Republican or Democrat, has been [that] the key thing here is Israel's security, & Israel is allowed to define its security in any way, shape, or form it wants. And its definition of security is one in which no one else has any capacity whatsoever." - Trita Parsi

"If you take a step back: Israel is bombing Lebanon all the time. Shouldn't the Lebanese government also want to have a degree of deterrence to make sure that the Israelis at least have to think twice before they strike Lebanon? But that's not part of the American paradigm. The American paradigm, Republican or Democrat, has been [that] the key thing here is Israel's security, & Israel is allowed to define its security in any way, shape, or form it wants. And its definition of security is one in which no one else has any capacity whatsoever." - Trita Parsi

Briahna Joy Gray

14,586 views • 1 month ago

Guys, I think this is a very important bug to do research into with the rest of the cast. I've tried already with other char's 1,2 , but can't replicate the same as it shows here. It very well may be that a lot of moves have this bug in the game. We just never had an explanation

Guys, I think this is a very important bug to do research into with the rest of the cast. I've tried already with other char's 1,2 , but can't replicate the same as it shows here. It very well may be that a lot of moves have this bug in the game. We just never had an explanation

FOX | Sin

135,578 views • 4 months ago

Hey Grok this clip of the Moon was filmed by a civilian using an amateur telescope from his backyard. So why is it that NASA, with unlimited resources, can’t or won’t, deploy a telescope on Artemis II, or any of the 10,000 satellites - to film & zoom in on the Earth from space. It should be so simple and everyone wants to see it, so why won’t NASA do this Grok ?

Hey Grok this clip of the Moon was filmed by a civilian using an amateur telescope from his backyard. So why is it that NASA, with unlimited resources, can’t or won’t, deploy a telescope on Artemis II, or any of the 10,000 satellites - to film & zoom in on the Earth from space. It should be so simple and everyone wants to see it, so why won’t NASA do this Grok ?

Concerned Citizen

235,564 views • 5 months ago