Re: RegisterEventHotKey and keylogging
Re: RegisterEventHotKey and keylogging
- Subject: Re: RegisterEventHotKey and keylogging
- From: Andrew Farmer <email@hidden>
- Date: Sat, 6 Feb 2010 11:18:37 -0800
On 6 Feb 2010, at 02:34, Michael Vannorsdel wrote:
> I found that I can hotkey any keys and then use CGEventPost to post the key to the front application. This effectively lets me track all the keys the user presses from a non-privileged application while still sending input to the key window/process. I was also able to see my admin pass as it was typed in to an authentication window without any side-effects.
>
> Am I missing something or is this a security flaw?
That sounds like a potential bug. Report it: https://bugreport.apple.com/_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden