Тёмный

Homebrew SECURITY FLAW! You could EASILY be ATTACKED! 

Apple Ninja
Подписаться 13 тыс.
Просмотров 2,4 тыс.
50% 1

Опубликовано:

 

30 окт 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 14   
@robertburrowes9671
@robertburrowes9671 2 года назад
Another approach is to create a new 'brew' user on the mac, and use it to install everything. You change to that user to add new binaries, but never use the 'brew' user account for anything else. Not requiring a password to add software, or to alter the files is /usr/local, is a huge security hole.
@AppleNinja
@AppleNinja 2 года назад
I like it Robert! Have an awesome day!
@007Knightjp
@007Knightjp 3 года назад
This is why I prefer macports over Homebrew.
@AtacamaHumanoid
@AtacamaHumanoid 3 года назад
I didn't quite catch what you did there to secure it.
@piperskenny
@piperskenny 2 года назад
thank you in advance for your time! : )
@jesuscervantes5590
@jesuscervantes5590 4 года назад
How about creating a script that goes back to a secure bin folder after downloading and installing any formulas and or casks?
@AppleNinja
@AppleNinja 4 года назад
I like that idea!
@piperskenny
@piperskenny 2 года назад
Hi Apple Ninja, great video! -- thank you. Q: I’m a bit confused though could you please clarify. As I understand your solution to this brew flaw is to chown the permissions back and forth. In other words you maintain permissions as: sudo chown root:wheel /usr/local/bin and then sudo chown macguy:admin /usr/local/bin when you want to install a formula? Is that correct? And what about: /usr/local/opt Q: Would your permissions toggling be advisable there, too? And if not why not?
@avashurov
@avashurov 2 года назад
What about the original location where the alias is pointing to? You can still overwrite that? How about the brew executable itself or it’s libraries?
@jimmyconway1513
@jimmyconway1513 Год назад
what if nothing pops up on brew list does that mean theres nothing to worry about as far as security ?
@jesuscervantes5590
@jesuscervantes5590 4 года назад
Also, what about MacPorts, does it also have security flaws?
@AppleNinja
@AppleNinja 4 года назад
It does not have the same flaw that Homebrew has, not sure about any other security risks.
@RayhanSefat
@RayhanSefat 2 года назад
what should we use then?
Далее
The COMPLETE MacOS Privacy & Security Guide!
22:47
Просмотров 66 тыс.
Brawl Stars expliquez ça
00:11
Просмотров 7 млн
Hacking Windows TrustedInstaller (GOD MODE)
31:07
Просмотров 695 тыс.
Mac Terminal  10 Awesome Mac Terminal Commands!
18:44
The 1st thing to install on ANY Mac
16:02
Просмотров 65 тыс.
Apple's Fastest Mac vs. My $5496 PC
14:55
Просмотров 2,6 млн
Hidden FREE Mac Apps!
28:14
Просмотров 193 тыс.
How I installed the HARDEST operating system
34:40
Просмотров 505 тыс.
How A Steam Bug Deleted Someone’s Entire PC
11:49