Knockout Win Against TCC - 20+ NEW Ways to Bypass Your MacOS Privacy Mechanisms

...During this talk, we will give you an overview of the TCC framework, its building blocks, and how it limits application access to private data. We will explore the various databases it uses and discuss the difference between user consent and user intent. Next, we will go through various techniques and specific vulnerabilities that we used to bypass TCC. It will cover techniques like regression vulnerabilities, code injections, logic bugs, built-in sysadmin tools abuse, and more. We will see how …

abuse access application bugs bypass code consent data databases discuss framework intent logic macos monterey privacy private private data sysadmin tcc techniques things tools vulnerabilities