Post

Replies

Boosts

Views

Activity

What steps does Apple take to ensure that the binaries I submit for notarization do not leak out?
I'm concerned about the security of my binary after I submit it for the notarization process.What steps does Apple take to ensure that the binaries I submit for notarization do not leak out into unintednded hands?I think I read somewhere in the official doc that even the notarization response links expire in a day (can't find it though - anyone knows which document says that?), and I don't see any way to get back to the binary after I submit it, but I would appreciate further clarification.
3
0
846
Aug ’19
prelink like tool on macOS?
hi, I have offered to help port a custom debug tool that "revives" a process from a core file. It currently works on Linux and Windows and I would like to help port it to macOS. On Linux, prelink is used to load a dynamic library at a specific addrress (to match its location in corefile). On Windows, editbin is used. Is there an off the shelf tool that loads a dylib on macOS at a specified address? I tried to research this topic and I see: dylibs on macOS are position independent, though apparently it is possible to build a position dependent lib (but the note doesn't say how) there is a slide value that adjust base address of a dylib (but I can not find much actual info on how exactly to use it) prebinding (deprecated?) I feel like I am starting to veer off into fun topics, like dylib hijacking and implementing custom dylib loaders (DyldDeNeuralyzer). As much as I enjoy going off main path sometimes, can someone help set me back on the main path? thanks!
8
0
121
May ’25