On 6 Feb 2010, at 02:34, Michael Vannorsdel wrote:
> I found that I can hotkey any keys and then use CGEventPost to post the key 
> to the front application.  This effectively lets me track all the keys the 
> user presses from a non-privileged application while still sending input to 
> the key window/process.  I was also able to see my admin pass as it was typed 
> in to an authentication window without any side-effects.
> 
> Am I missing something or is this a security flaw?

That sounds like a potential bug. Report it: 
https://bugreport.apple.com/_______________________________________________

Cocoa-dev mailing list ([email protected])

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [email protected]

Reply via email to