undefined | Better HN

0 pointsplttn9y ago0 comments

>- We never see or store your admin password. The dialog box you see is a native OS X API (i.e. made by Apple).

Direct from the DB engineer at top of thread.

0 comments

3 comments · 1 top-level

DINKDINK9y ago· 2 in thread

If that's the case, How is it that the accessibility preferences are changed without root authorization?

gumby9y ago

Presumably with one of the suid executables you authorized when you typed your root password to the dialogue.

And one of them is writable by anyone -- great security, guys!

Does OS X not clear suid when a file is written to?

j / k navigate · click thread line to collapse