![]() ![]() Stop for a minute and let the script sink in :) Here is what does it do in human language: # GOG.com (# GOGLauncher Script FIND_GAME = `find game/ -type d -maxdepth 1 -name "*.app" ` xattr -r -d " $FIND_GAME " open " $ " I used to buy games from I like that they are DRM free, I can backup the game, don’t need to rely on online connectivity, etc… It turns out that they have very interesting script in one of the main packages to launch games: If I run the same search on my private MacBook there are a whole lot of other apps that has scripts inside, and I found one particularly funny. In short macOS will only verify code signature upon first execution, anything changes after that will be undetected. ![]() Sublime has a code signature and hash for this script, the reason macOS will not block tampering with the script, was covered by Thomas Reed in his talk about “Code Signing flaw in macOS“: You will get a prompt on Mojave to grant access, but you can add other code, which would do something else to avoid this prompt, and even if you get it, an average user will just grant access. system( "osascript -e 'Tell application \" System Events \" to display dialog \" Message \" '") Second, you install it by drag
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |