In this blog post, we briefly discussed High Sierra's "Secure Kernel Extension Loading" (SKEL) and demonstrated a new 0day vulnerability that can be exploited to fully bypass this new `security' feature.
Unfortunately when such `security' features are introduced - even if done so with the noblest of intentions - they often just complicate the lives of 3rd-party developers and users without affecting the bad guys (who don't have to play `by the rules'). High Sierra's SKEL's flawed implementation is a perfect example of this. [There are many other examples.]
Of course if Apple's ultimate goal is simply to _continue_ to wrestle control of the system away from it users, under the guise of `security', I'm not sure any of this even matters."
In this blog post, we briefly discussed High Sierra's "Secure Kernel Extension Loading" (SKEL) and demonstrated a new 0day vulnerability that can be exploited to fully bypass this new `security' feature.
Unfortunately when such `security' features are introduced - even if done so with the noblest of intentions - they often just complicate the lives of 3rd-party developers and users without affecting the bad guys (who don't have to play `by the rules'). High Sierra's SKEL's flawed implementation is a perfect example of this. [There are many other examples.]
Of course if Apple's ultimate goal is simply to _continue_ to wrestle control of the system away from it users, under the guise of `security', I'm not sure any of this even matters."
https://www.synack.com/2017/09/08/high-sierras-secure-kernel...