Comment Comment by s800 At least on OSX 10.11 (not sure about others), you can't sniff loopback as a normal user.So, if you could sniff this, you'd have elevated privs anyway, which means you could read the keyboard device, memory, etc.Not ideal, but not sure it's a glaring hole. IMHO. I'd love to hear other thoughts on how to exploit this / how I'm underestimating this hole. parent s800 10 years ago
So, if you could sniff this, you'd have elevated privs anyway, which means you could read the keyboard device, memory, etc.
Not ideal, but not sure it's a glaring hole. IMHO. I'd love to hear other thoughts on how to exploit this / how I'm underestimating this hole.