This is Mac OSKenn.

This is Mac OS Ken.

Project Zero hits Apple. news of an interesting patent purchase, and tension between

Tech and Tinsultown. It's Tuesday the 5th of March, 2019.

I'm Ken Ray, and this is news from Maco-S Ken.

Brought to you by yours truly and supported by people like you patrons through Patreon.

Find out more and your support at Patreon.com slash MacoS can.

Are you familiar with Google's Project Zero Security Disclosure Program?

I've been sort of aware of it though I didn't fully grock it until yesterday when one of the guys from

secure Mac explained it to me. Basically when Google learns of a vulnerability it contacts the

organization or organizations affected, gives them as much

information on the vulnerability as it has, then starts the clock. At that point the

affected orgs have 90 days to fix the issue, though there is the possibility

of a 14-day grace period, should a company be close to a fix.

When time is expired, Project Zero publishes all of the information it has on the vulnerability,

even if it's not yet fixed.

Guess what happened yesterday.

And Gaggett says Google detailed a high severity Mac OS kernel flaw that lets people

modify a user mounted file system image without a virtual management

subsystem being any the wiser, theoretically letting an attacker

go unnoticed by users.

Apple is working on a patch but the disclosure ahead of the fix could leave

...