Hacker News Reader

I remember somebody trying to hook into the Apple Find My network (that is, do things with AirTags). They did that by… being a Mail.app plug-in or something to get the correct entitlements? That certainly sounds like the wrong permissions.

Ah, it was OpenHaystack: https://github.com/seemoo-lab/openhaystack#installation

View on HN

Oh, wow, haven't heard of Apple Mail plugins in a decade! I really thought Apple would have deprecated them by now.

Mail plugins are kind of a special case, they're REALLY "legacy", so they work by sharing process memory and being able to access way more than they should, like all your messages, possibly even passwords if the developer is clever enough.

Also notoriously difficult to build, since the Mail internal API breaks from time to time, so they're a rarity these days.

Also notoriously difficult to install.

Reply on news.ycombinator.com