On: Show HN: I reverse engineered macOS to allow custom Lock Screen wallpapers

[ronsor]

> Until apple starts doing any checksum checks on these files I doubt this method will break anytime soon.

Watch as this is used for malware persistence through a code execution exploit. Then Apple will start verifying the file content.

[1970-01-01 → ronsor]

.scr files are untrusted for this very reason.

[jeroenhd → 1970-01-01]

.scr files are untrusted because they're plain PE executables. You don't need to exploit anything to get code execution because all they do is execute code.

If they were just video files, they wouldn't be such a vector for malware.

[1970-01-01 → jeroenhd]

You still need to priv esc