🚨PSA: If you think you're a targeted individual, don't install macOS apps from the web. macOS code signing and TCC are broken. We accidentally found a bug that lets any command modify the binaries of other apps, including Signal, Brave, Chrome, and even Xcode. Watch the demo👇
#privacy #Apple #security #infosec #cybersecurity
Mysk🇨🇦🇩🇪
npub1h5…5hfst
2026-06-26 11:01:43 UTC
Author Public Key
npub1h5s3huxjkajkqnqxtvppuwe59x8jzdkqqskdkejmd0mzs2ex383sl5hfstSeen on
wss://relay.momostr.pinkPublished at
2026-06-26 11:01:43 UTCEvent JSON
{
"id": "2bf64b9da5c8c5ad69bb0843d7dfe7efcd9c34eecd10190d724e222a4e77e5da",
"pubkey": "bd211bf0d2b765604c065b021e3b34298f2136c0042cdb665b6bf6282b2689e3",
"created_at": 1782471703,
"kind": 1,
"tags": [
[
"imeta",
"url https://files.mastodon.social/media_attachments/files/116/816/057/971/688/444/original/9880f81668816633.mp4",
"m video/mp4"
],
[
"proxy",
"https://mastodon.social/@mysk/116816065579359109",
"web"
],
[
"t",
"apple"
],
[
"t",
"privacy"
],
[
"t",
"cybersecurity"
],
[
"t",
"security"
],
[
"t",
"infosec"
],
[
"proxy",
"https://mastodon.social/users/mysk/statuses/116816065579359109",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.social/users/mysk/statuses/116816065579359109",
"pink.momostr"
],
[
"-"
]
],
"content": "🚨PSA: If you think you're a targeted individual, don't install macOS apps from the web. macOS code signing and TCC are broken. We accidentally found a bug that lets any command modify the binaries of other apps, including Signal, Brave, Chrome, and even Xcode. Watch the demo👇\n\n#privacy #Apple #security #infosec #cybersecurity\nhttps://files.mastodon.social/media_attachments/files/116/816/057/971/688/444/original/9880f81668816633.mp4\n",
"sig": "c7eff4a43fdbcc47a82e5b870297bbb66cd1a6446db153ef35c07b32ca7f81a4d84090c2271d5e6828c8cf2996970c8a89fc97507fbaf768da61ddec46e3af3f"
}