Mr. Steal Yo Keychain | Patrick Wardle

TL;DR on recent versions of macOS, including High Sierra, arbitrary apps can dump the full OS keychain (including your plaintext passwords). I tweeted about this last night which included a link to a video demonstrating this attack. Since 140 characters isn't really enough space, I wanted to clarify a few things. Q: What is the keychain? A: Detailed by Apple in a document titled "Keychain for Mac"

[ka-ka_xyz]

ほんとだとしたら最高にヤバいやつなのでは（Win屋なので他人事感）。続報待ち

[june29]

High Sierra に固有の問題じゃないとのこと。

[karia]

"I've only tested the exploit on Sierra and High Sierra, but El Capitan appears vulnerable as well. So to clarify, this is not a 'High Sierra specific' vulnerability." ITmediaの記事なんだったの