Re: Kernel extensions and code injection?
site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com On Feb 17, 2005, at 3:41 PM, Brian Kendall wrote: = Mike _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... As I understand it, the only thing that comes close in userland (meaning you wouldn't need to be root or admin to do it) is you can install an event handler on the event monitor target, which was new to Panther. However, it only lets you receive and monitor events (and not intercept events), and in the case of privacy concerns, any key event typed in a password text field is not sent to the event monitor, so it's more or less useless for spyware stuff. There are *plenty* of things typed in non-password fields that should not be monitored... This email sent to site_archiver@lists.apple.com
participants (1)
-
Mike Smith