Nothing exciting, just an important bug fix. In the meantime, we’re continuing our work to sustainably open-source Espionage. Fixes Fixed crash on macOS Sierra during installation. The signature for Espionage.dmg is here and also here (pubkey here). The SHA256 of the main binary is also noted below. Enjoy! 😀 $ openssl dgst -sha256 Espionage.app/Contents/MacOS/Espionage SHA256(Espionage.app/Contents/MacOS/Espionage)= […]
It has been brought to our attention that recent versions of Mail on OS X (perhaps starting with 10.10, but definitely since 10.11), will re-download all of your email from your email server. And since your server doesn’t encrypt your email, that’s a serious concern. This means that the following attack is possible to bypass Espionage’s […]
EDIT February 17, 2016: 3.6.4 and 3.6.5 release notes included here as there are only minor changes. We’re momentarily back from our break in cryptocurrency-research-land (where we’ve been advancing our goal of sustainably open-sourcing Espionage) to bring you the immediate release of Espionage 3.6.3! “But wait! This doesn’t seem like such an exciting release! What […]
This is a followup to yesterday’s post: Sky Not Falling: Sparklegate Not As Bad As It Could Be After trying and failing to reproduce Sparklegate, I arrived at the conclusion that Gatekeeper and Quarantine did in fact protect OS X users from the Remote Code Execution (RCE) attack. What I Missed Radek, the discoverer of […]
UPDATE February 1, 2016: It turns out some users are vulnerable to this attack. Read this followup post! Sparklegate is the term I’ve coined for the recent discovery that, allegedly, every OS X machine out there is vulnerable to RCE (remote-code-execution) attacks because the widely used Sparkle framework, along with OS X’s standard WebView component, […]