Mac

‘Before Your Eyes’ From GoodByeWorld Games Comes to Mac
Cool Stuff Found

'Before Your Eyes' From GoodByeWorld Games Comes to Mac

Andrew Orr ·

In Before Your Eyes, players embark upon a thought-provoking journey with the Ferryman who is tasked with shepherding souls to the afterlife. They move through time by using real-world blinking to interact and progress through the story. Before Your Eyes’ unique blink interaction mechanic offers a novel way for players to control the story and become more immersed, as their progress is determined through their eyes and detected through the player’s webcam. Purchase Before Your Eyes on Steam as part of a deluxe content bundle including the game, its complete soundtrack in MP3 and lossless formats and an artbook with concept art, character designs and insight from the team for US$13.49. The deluxe content is also available separate from the game for US$7.99.

Link

macOS Finder Bug Lets Certain Files Run Arbitrary Commands

Andrew Orr ·

Researcher Park Minchan reported a bug within macOS Finder that lets certain files execute commands. It affects all versions of macOS up to Big Sur.

A vulnerability in the way macOS processes inetloc files causes it to run commands embedded inside, the commands it runs can be local to the macOS allowing the execution of arbitrary commands by the user without any warning / prompts.

Originally, inetloc files are shortcuts to an Internet location, such as an RSS feed or a telnet location; and contain the server address and possibly a username and password for SSH and telnet connections; can be created by typing a URL in a text editor and dragging the text to the Desktop.

Link

'OSX.ZuRu' Malware Spreads From Trojanized Apps via Sponsored Search Results

Andrew Orr ·

The latest Mac malware to be discovered is called OSX.ZuRu. It spreads via infected apps from sponsored search results.

The legitimate and the malicious iTerm2 application bundles contain a massive number of files, including several Mach-O binaries. Moreover, the malicious version appears largely benign (as is the case with most applications that have been surreptitiously trojanized). As such, it takes us a minute to uncover the malicious component.

Update to ‘Sensei’ Brings a Monitoring Tool to Check Your Mac’s Performance
Cool Stuff Found

Update to 'Sensei' Brings a Monitoring Tool to Check Your Mac's Performance

Andrew Orr ·

Sensei Monitor is a new feature in Sensei that allows you to monitor your Mac performance in realtime, right from the menu bar. Create and customize panels and status bar items with different widgets to create the ultimate Mac menu bar system monitor, tailored just for you. Sensei Monitor has been in development for over a year, and features an advanced statistics engine as well as a design that fits in perfectly with modern versions of macOS. Developed using cutting-edge technology such as SwiftUI, it features an intuitive editor where the user can customize their monitoring using drag and drop. Here are the Mac features you can monitor: CPU,  CPU Cores, GPU, RAM, Storage, Network, Temperature Sensors, Fan Speeds, Battery, Process Usage (CPU / RAM / Energy).

Quit Every Running App on Your Mac the Easy Way with Amico App’s Quit All
Cool Stuff Found

Quit Every Running App on Your Mac the Easy Way with Amico App's Quit All

Jeff Gamet ·

Quitting all the open apps on your Mac involves a lot of Command-Q typing or building your own Automator action, or now just installing Quit All from Amico Apps. This cool app lets you quit every running app on your Mac from the menu bar with a mouse click, and you can view and quit hidden processes, too. You can also force quit frozen apps, or quit just the one or two apps you don’t need running. Quit All costs US$5 and is available for download at the Amico Apps website.

Link

The Secret Security Features in macOS Big Sur

Andrew Orr ·

There are security features that Apple tells us about on stage at keynotes, and then there are hidden improvements it doesn’t mention.

macOS has gradually made the UNIX security model irrelevant. For example, even the superuser is only allowed to access the private documents of a regular user with the user’s permission—permission that is given on a per-application basis, through that protector of users and bane of developers known as the Transparency, Consent & Control (TCC) framework.