Hacker News Reader

FWIW:

1. That wasn't a bug for "over a decade," as far as I'm aware. It was only introduced with an OS update

2. I could be wrong here, but it required you to already have created a root user with a blank password, which isn't possible unless you know how to trigger another bug that does it.

That’s not a convincing argument that this VM somehow reflects a LAN based sandbox escape attack.

It's just a reflection on how Apple's security can't be trusted, regardless of the possible vector. Big companies like Apple need vulnerabilities for deniable intelligence and national security access, but anybody can find and use these to achieve a breach.

"TikTok requires local network access to <cast to your TV or some other reason>" and there we have it, local network access.