- KnockKnock: perform system scan to list everything you have installed, like kexts, browser components, startup scripts, etc.
- BlockBlock: continuously monitor system for changes to startup scripts
- TaskExplorer: tool to examine a running processes
- Oversight: continuously monitor microphone and webcam activity
Nice UX too.
[0] - https://objective-see.com/about.html [1] - https://www.patreon.com/bePatron?u=4857001
The shasum need to be digitally signed with a valid signature otherwise it can be manipulated as well.
ps. Ofc tools like littlesnitch and blockblock help, but keeping track of all the applications that try to access the internet is kinda hard these days, especially on a user machine.
Similar thing happened to TransmissionBT. For a while, their legit website was serving a hacked binary.
Pinned long-term public keys are the only way to verify this stuff. Even that isn't fool-proof if the rogues get commit access.
It might work in the way that generating a hash collision for an arbitrary string works??
Probably wouldn't help in these situations, just curious.
I am against centralization and all as well, but I think that is the lowest barrier to entry for them right now, as they already have a repo there.
Has anyone used a platform that had an unspoofable one of these?
This prevents hostile apps from stealing your root password, but doesn't stop them from tricking you into giving them root access (which is nearly as bad).
condition:
Macho and filesize < 600000 and filesize > 10000 and all of them