Hacker News Reader

It’s definitely more vulnerable than macOS since macOS has more encompassing system protection (SIP), kernel extensions have been moved to user space (DriverKit and FSKit), and pervasive sandboxing.

View on HN

Interesting, I might need to do some reading, but macOS was terrible for a long time, and seriously lagging behind windows when it came to security. They seemed to just be coasting on the fact that Apple as a platform simply wasn't targeted to anywhere near the extent Windows was.

They didn't even have an ASLR implementation for way too long IIRC.

Does macOS have any form of MAC yet, or do they just rely on sandboxing?

> Interesting, I might need to do some reading, > Does macOS have any form of MAC yet, or do they just rely on sandboxing?

Kind of. There is a set of permissions an application can request in order to access protected services and areas of the filesystem, but maybe that's what you meant with sandboxing?

https://support.apple.com/en-gb/guide/mac-help/mchl211c911f/...

That just seems like stuff that requires an admin password.

> It’s definitely more vulnerable than macOS since macOS has ...

That tells us some things about MacOS security, but nothing about Windows.

Reply on news.ycombinator.com