macOS vs real world attacks (with Linux)

Join our IT and Security Discord!

In this video we test to see how MacOS can handle a password stealer, a remote access tool, and ransomware. Does it stack up against Windows? You'll have to watch to find out ;)

Shot on iPhone. Edited on iPad.

[CybersecPat]

Let me know if you want to see more videos testing security on different operating systems!

[tomprice]

He's not wearing sunglasses and a black trenchcoat. I'm not convinced this guy is a real hacker.

[SilentShadow-ssxp]

Real hackers always have to have htop running in the background

[Zobrombee]

Good video thanks. It would be cool to show us how windows behaves comparitively in a video instead of just telling. The font size in the code editor and terminal is kind of tiny, bumping that up a few sizes would make it a lot more clear in the final video.

[TheFPSPower]

What is weird on Windows is that it's absolutely possible to encrypt browser passwords just like the mac, but Chromium has never bothered to fix this massive security flaw and neither has Microsoft.
It actually asks for authentication when you try to see a password in plain text but it's not actually secured in memory otherwise it couldn't auto-fill passwords without authentication like the Mac.

[shadowpenguin]

Re #2, I feel like there is no issue with macOS here. There is nothing it could possibly do to prevent this kind of attack.

There is also no unexpected privilege escalation here, if you run untrusted code on your machine, don’t be surprised that it executes untrusted code~. Whatever is typed it on the remote server might as well be in the original file

[withmygoodeyeclosed]

love htop running on that dedicated monitor lmao

[Gabriel-cswo]

I just found out this channel and I've watched all of your videos! You are doing an excellent job, great content, great showcases, great explanations! It will be one of my most watched YouTube channels for sure.

[istvanbarta]

It's very similar like Linux (Unix-like vs Unix :) ), and it's a huge different to ask the password vs click OK if you want to run as administrator like Windows do, but if the user get used to it, because have admin privilege anyway, it's not real different between any OS in relation of security. The key is still the (power-/end-)user awareness and the good user-right management (not just in companies, but at home too eg if kids also using the same PC).

[FlorinArjocu]

I wonder though why MacOS does not allow access to the Desktop folder, as it is a simple user folder, not some system folder. Nothing bad (except maybe stealing something kept there) can happen.

[imca_b_]

you are Harry potter of Cyber security XD

[TheCurtisnixon]

if you have root access, ie, #2, the other 2 hacks become childs play....

[otfyymg]

although i use arch btw. i really like the macOS permission control system

[kibugenzaking]

do one video with debian 12 linux, Bookworm. and you did great work 👏

[otfyymg]

i belive the chrome password can be extracted via the directory and some cracking... considering your using the `security` command. your basically asking for it instead of stealing it.

[ackdor]

does linux ask for authentication for the #1 attack?
also, how does it fare against all 3 attacks?

[flashbond]

Shute the guy is ceerius. He's got two camera angles

[matthews]

I like how you say Windows wouldn't do this when you don't actually try it
and you can configure Windows properly so that the user is not root
and presumably at that point it would ask

[ThomasGanterPrien]

Presentation is nice and professional, but the audio is a disaster. That runs it for me.