1
00:00:03,900 --> 00:00:06,560
All right, folks, thank you for attending.

2
00:00:07,340 --> 00:00:08,860
This is Getting a Migraine.

3
00:00:09,260 --> 00:00:12,040
I'm Jonathan, or JBO for short.

4
00:00:12,800 --> 00:00:16,300
This is Mike or Michael, however you want to call him.

5
00:00:16,400 --> 00:00:22,260
And Anurag was unable to come to DEF CON, but still he took an extremely important part

6
00:00:22,260 --> 00:00:23,000
in this research.

7
00:00:24,400 --> 00:00:28,520
We're all Microsoft researchers, which is kind of weird, because, like, Microsoft usually

8
00:00:28,520 --> 00:00:36,220
do Windows stuff and not Apple stuff, however, we work for Microsoft Defender, and the reason

9
00:00:36,220 --> 00:00:40,540
why it's called Microsoft Defender and not Windows Defender is because it runs on platforms

10
00:00:40,540 --> 00:00:48,000
that are not Windows, and we do Mac, Android, iOS, Linux, those kind of stuff.

11
00:00:48,320 --> 00:00:51,080
So this is kind of like a motivation that we have.

12
00:00:51,700 --> 00:00:57,780
This is not a Defender talk, but, I mean, just shows you that, like, where we're coming

13
00:00:57,780 --> 00:00:58,080
from.

14
00:00:59,780 --> 00:01:06,940
The outline for today is talking about some of the macOS mechanisms, specifically SIP and

15
00:01:06,940 --> 00:01:07,620
entitlements.

16
00:01:08,160 --> 00:01:14,460
We're going to talk about how we found a vulnerability by mistake, kind of, how we automated our

17
00:01:14,460 --> 00:01:16,980
exploit by means of reverse engineering.

18
00:01:17,260 --> 00:01:18,200
We'll have a demo.

19
00:01:18,660 --> 00:01:21,300
We'll talk about the implications of what we've done.

20
00:01:21,940 --> 00:01:27,280
We'll talk about Apple's fix and basically fix this, I would say, and then we'll have

21
00:01:27,280 --> 00:01:27,860
some conclusions.

22
00:01:27,860 --> 00:01:30,520
So let's get to it.

23
00:01:31,640 --> 00:01:32,620
Some background.

24
00:01:33,540 --> 00:01:37,760
SIP or rootless is a mechanism in macOS.

25
00:01:37,840 --> 00:01:43,200
If you're just unfamiliar with macOS completely, it's a mechanism that limits the capabilities

26
00:01:43,200 --> 00:01:44,800
of this super user of root.

27
00:01:44,940 --> 00:01:50,460
If you're coming from a traditional POSIX world, root can do anything, and that's not

28
00:01:50,460 --> 00:01:50,980
true anymore.

29
00:01:51,820 --> 00:01:56,500
In macOS, even if you're running as root, you can't do a bunch of stuff, including in

30
00:01:56,500 --> 00:01:56,980
user land.

31
00:01:56,980 --> 00:01:57,160
So if you're running as root, you can't do a bunch of stuff, including in user land, which

32
00:01:57,160 --> 00:01:58,820
is kind of foreign to a lot of folks.

33
00:01:59,740 --> 00:02:04,060
What it does is to leverage something called the Apple Sandbox in order to protect the

34
00:02:04,060 --> 00:02:04,780
entire platform.

35
00:02:06,400 --> 00:02:11,040
By default, you can't turn it off without going into recovery OS.

36
00:02:11,320 --> 00:02:17,220
I won't talk about recovery OS too much today, but generally what it means is that you have

37
00:02:17,220 --> 00:02:20,980
to click to hit a bunch of keys and then reboot.

38
00:02:21,120 --> 00:02:24,940
You have to have a physical machine, you have to solve the Hellraiser puzzle and stuff like

39
00:02:24,940 --> 00:02:25,120
that.

40
00:02:25,960 --> 00:02:32,940
You're not supposed to turn it off at all, and several organizations, including Microsoft,

41
00:02:33,260 --> 00:02:38,080
like in our own internal network, actually monitor and make sure that SIP is always on

42
00:02:39,180 --> 00:02:41,480
as a defense in-depth mechanism.

43
00:02:43,860 --> 00:02:49,800
We'd like to think of it just mentally, that's not accurate at all from a technical perspective,

44
00:02:50,040 --> 00:02:55,000
that it's kind of like SELinux on Linux or protected.

45
00:02:55,000 --> 00:02:57,580
It's kind of like SELinux on Linux or protected processes on Windows, in the fact that you

46
00:02:57,580 --> 00:03:02,040
know you're admin, but you don't own the machine anymore to some extent.

47
00:03:03,380 --> 00:03:09,980
SIP limits certain actions of the root user and all users, really, to, as the name suggests,

48
00:03:10,340 --> 00:03:12,500
to protect the integrity of the system.

49
00:03:13,020 --> 00:03:18,740
That means there are certain files you can't override, there are kernel operations you

50
00:03:18,740 --> 00:03:24,980
can't do and so on, and we'll be talking about that more thoroughly in the next few

51
00:03:25,000 --> 00:03:25,300
slides.

52
00:03:27,960 --> 00:03:32,360
SIP itself, internally, is controlled by NVRAM variables.

53
00:03:34,300 --> 00:03:39,620
There's actually more than one, but we're going to talk about CSR active config on Intel

54
00:03:39,620 --> 00:03:46,360
platform, and in the Apple silicon that runs on ARM, they have a thing called LPSIP0 that

55
00:03:46,360 --> 00:03:53,360
is read from the booted device tree, and interestingly enough, because Mac OS, like XNU specifically,

56
00:03:53,540 --> 00:03:54,980
the kernel is kind of like half-coded.

57
00:03:54,980 --> 00:03:57,480
Half open source, or like 90% open source.

58
00:03:57,780 --> 00:04:03,840
You can find all the flags in the source code under CSR.h, and I name here just a few.

59
00:04:03,980 --> 00:04:09,540
It's not a complete list at all, but you can, again, kind of imagine what SIP does.

60
00:04:09,800 --> 00:04:16,020
So for instance, it won't let you load unrestricted, you know, just any kernel extensions, which

61
00:04:16,020 --> 00:04:17,440
are really drivers.

62
00:04:18,320 --> 00:04:23,940
You can't write to certain file system locations, which we'll be talking about today.

63
00:04:23,940 --> 00:04:27,820
You can't get task ports for a given PID.

64
00:04:27,880 --> 00:04:32,980
A task port is basically like open process in Windows or P-trace in Linux.

65
00:04:33,100 --> 00:04:35,400
You can't really debug processes for what it's worth.

66
00:04:36,780 --> 00:04:41,620
You can't do kernel debugging, you can't do D-trace, you can't write NVRAM variables

67
00:04:41,620 --> 00:04:42,600
for obvious reasons.

68
00:04:42,760 --> 00:04:47,680
If you could, you can just change like SIP altogether, and there are other flags here

69
00:04:47,680 --> 00:04:48,340
as well.

70
00:04:48,440 --> 00:04:52,900
But the issue that I want to talk about is the fact that it has a certain domino effect.

71
00:04:53,940 --> 00:05:00,320
What I mean by that is that if you have, let's say, an NVRAM variable override, a way

72
00:05:00,320 --> 00:05:06,680
to bypass the NVRAM variable write protection by SIP, you can bypass SIP.

73
00:05:06,820 --> 00:05:11,000
Obviously, you can just overwrite like the bit flag in CSR active config.

74
00:05:11,260 --> 00:05:16,680
And similarly, if you can load an untrusted kernel extension, you can just write a rootkit,

75
00:05:16,740 --> 00:05:17,800
but also bypass SIP.

76
00:05:18,860 --> 00:05:22,720
And in fact, any part of SIP you can bypass.

77
00:05:22,720 --> 00:05:25,760
Bypass actually like topples the entire domino of SIP.

78
00:05:25,940 --> 00:05:27,560
So that's important to note.

79
00:05:27,620 --> 00:05:31,660
Generally, if you were able to bypass one mitigation, you were able to bypass all of

80
00:05:31,660 --> 00:05:34,320
them in theory and also not in theory.

81
00:05:37,280 --> 00:05:40,660
A bit about SIP and file system restrictions.

82
00:05:40,820 --> 00:05:46,080
If you're a developer or malware author or whatever it is, that's probably the first

83
00:05:46,080 --> 00:05:51,120
thing that you'd notice when you come across SIP is the fact that you can't really write

84
00:05:51,120 --> 00:05:52,120
to certain paths.

85
00:05:53,820 --> 00:05:58,560
Because SIP actually prevents you from doing that, again, even if you're running as root.

86
00:06:00,160 --> 00:06:06,900
So SIP really prevents you from modifying any files that either have a specific extend

87
00:06:06,900 --> 00:06:13,060
and attribute called com.apple.rootless or are configured in some file system library

88
00:06:13,060 --> 00:06:15,240
sandbox config, rootless.conf.

89
00:06:15,420 --> 00:06:22,320
And that's like a naughty list, I guess, for files that basically a set of files that can't

90
00:06:22,320 --> 00:06:23,360
be overwritten.

91
00:06:23,520 --> 00:06:28,460
But there are also allow lists for these restrictions that override like the rootless.conf.

92
00:06:28,640 --> 00:06:30,280
And they're out of scope for this talk.

93
00:06:30,560 --> 00:06:31,860
But they're well-documented.

94
00:06:32,600 --> 00:06:37,280
Obviously, the rootless.conf file is SIP protected by itself.

95
00:06:37,780 --> 00:06:41,660
Otherwise, again, you'd be able to change it and then do a bunch of stuff.

96
00:06:42,140 --> 00:06:48,220
And also, you can't really add or delete the com.apple.rootless extended attribute

97
00:06:48,220 --> 00:06:49,880
for the same reason, right?

98
00:06:49,940 --> 00:06:52,300
If you could add that extended attribute, you can create, like, you know, you can create

99
00:06:52,300 --> 00:06:54,300
like an undeletable malware, for instance.

100
00:06:54,420 --> 00:06:59,220
If you could remove that, you could bypass SIP because you could modify files that are

101
00:06:59,220 --> 00:07:00,120
protected by SIP.

102
00:07:00,360 --> 00:07:02,180
So just keep that in mind.

103
00:07:02,420 --> 00:07:09,740
And generally, like, Apple has released a modification to the ls command.

104
00:07:11,960 --> 00:07:20,280
If you do ls-lo, that's a capital O, an actual O, not a zero, then all the files that say

105
00:07:20,280 --> 00:07:22,220
restricted are basically files.

106
00:07:22,220 --> 00:07:27,060
Or directories or symlinks or whatever they are that basically can't be modified.

107
00:07:27,300 --> 00:07:32,820
So that's an example of a restricted file, for instance.

108
00:07:36,560 --> 00:07:40,120
So how, I mean, that's obvious, right?

109
00:07:40,240 --> 00:07:41,240
I mean, we have SIP.

110
00:07:41,300 --> 00:07:44,820
We basically have a different kind of layer in the system, if you will.

111
00:07:45,040 --> 00:07:47,200
And how does the thing work?

112
00:07:47,280 --> 00:07:50,940
And how do we enforce things in macOS?

113
00:07:51,400 --> 00:07:51,920
Yeah.

114
00:07:52,220 --> 00:07:53,880
I mean, there's some background about entitlements, really.

115
00:07:54,060 --> 00:07:57,280
In the macOS ecosystem, processes are signed, right?

116
00:07:57,380 --> 00:08:01,340
And they're granted something called entitlements, which are basically capabilities.

117
00:08:03,000 --> 00:08:09,160
So because entitlements are part of the signature of the process, you can't forge them easily,

118
00:08:09,620 --> 00:08:13,920
at least, unless you have, like, a gazillion PS4s and you connect them and, I don't know,

119
00:08:13,940 --> 00:08:15,120
find a collision or something.

120
00:08:15,720 --> 00:08:20,960
And you can think of entitlements of a way to make a process stronger, right, again,

121
00:08:21,020 --> 00:08:21,900
in terms of capability.

122
00:08:22,220 --> 00:08:29,500
And the interesting part is that Apple has private entitlements that they will only grant

123
00:08:29,500 --> 00:08:30,700
to their own processes.

124
00:08:30,920 --> 00:08:35,920
And because they sign everything, they won't sign your processes with those entitlements.

125
00:08:36,140 --> 00:08:40,560
These are known as private entitlements, and that essentially creates, like, a barrier

126
00:08:40,560 --> 00:08:46,100
or a capability-based security layer, if you will, because if you're able to only

127
00:08:46,100 --> 00:08:52,200
run, to only get certain capabilities or entitlements but not the other capabilities.

128
00:08:52,220 --> 00:08:57,160
type of entitlements and apple are the only ones who can have that entitlements and the entitlements

129
00:08:57,160 --> 00:09:03,740
are being um translated into capabilities by the os it basically means that apple has the keys to

130
00:09:03,740 --> 00:09:09,460
the kingdom they control your box you don't control your box uh as much anymore because you

131
00:09:09,460 --> 00:09:14,740
can't get those capabilities you can't get those entitlements and uh that's something very

132
00:09:14,740 --> 00:09:19,740
interesting especially for us again microsoft defender because we don't have those capabilities

133
00:09:19,740 --> 00:09:25,940
either right um and you can think about the implications uh which we will be talking about

134
00:09:25,940 --> 00:09:34,680
later for instance uh you know because because we can't um we can't let's say uh modify the com

135
00:09:34,680 --> 00:09:39,640
apple uh rootless extender attribute if there is a file that is naughty and have that extender

136
00:09:39,640 --> 00:09:44,420
attributes we're kind of like we're kind of screwed because we can't really uh delete that

137
00:09:44,420 --> 00:09:49,660
file that's just an example um and uh there are two very interesting

138
00:09:49,740 --> 00:09:54,380
entitlements for sip file system restrictions there are actually more like sip is very rich

139
00:09:54,380 --> 00:09:59,620
as you could see but there are these there are the two very interesting entitlements that i want to

140
00:09:59,620 --> 00:10:05,040
talk about today which are com apple rootless install and that basically bypasses all the

141
00:10:05,040 --> 00:10:10,100
sip file file system checks so if you have a process that has that entitlement which is a

142
00:10:10,100 --> 00:10:15,120
private entitlement it can basically bypass all sip file system checks which is really powerful

143
00:10:15,120 --> 00:10:19,240
and then you have something even greater which is called com apple rootless

144
00:10:19,740 --> 00:10:25,480
install heritable which inherits to all child processes the com apple rootless install which

145
00:10:25,480 --> 00:10:30,520
means that all of the child processes are going to be able to bypass sip file system enforcements

146
00:10:30,520 --> 00:10:37,480
on their own now if you think about the motivation why why do these things even exist right like why

147
00:10:37,480 --> 00:10:42,440
why punching a hole through that security layer then you have to think about the name com apple

148
00:10:42,440 --> 00:10:48,500
rootless install these things are used for installations and updates for instance when apple

149
00:10:48,500 --> 00:10:49,500
wants to do an os

150
00:10:49,740 --> 00:10:56,060
update they basically have to um they have to write to certain files then those files might

151
00:10:56,060 --> 00:11:02,240
be protected and that's the way they do it they have let's say update an updater that updater has

152
00:11:02,240 --> 00:11:08,220
that uh those capabilities and then it's able to do whatever uh overwrite arbitrary files and so on

153
00:11:08,700 --> 00:11:14,560
so that's that's the motivation that apple has to even having those entitlements if that makes sense

154
00:11:15,700 --> 00:11:19,100
um so this is just this was all just background

155
00:11:19,740 --> 00:11:25,760
now um while performing routine malware hunting we started noticing a process named drop sip

156
00:11:26,320 --> 00:11:32,280
and the name itself like is is suggestive as you can think uh and that seems to be prevalent on

157
00:11:32,280 --> 00:11:37,920
many devices and we were like oh cool we found some malware and probably some zero day in the

158
00:11:37,920 --> 00:11:44,040
wild we were very excited and a closer inspection revealed it's an apple sign binary that runs under

159
00:11:44,040 --> 00:11:49,380
the system migration private framework directory and actually drops capabilities that bypass

160
00:11:49,740 --> 00:11:56,080
uh sip file system checks uh with an api called csops that's a private api that i will be

161
00:11:56,080 --> 00:12:01,080
discussing the next slide and mentally we think that it should have been called drop drop zip

162
00:12:01,080 --> 00:12:07,800
but i mean i mean that's what it is and it's not malware that's the entire reversing

163
00:12:08,380 --> 00:12:12,020
that's the entire file actually so reversing it is not even like a thing

164
00:12:12,020 --> 00:12:18,040
as you can see here basically what it does that's the main function for all means and purposes

165
00:12:18,600 --> 00:12:19,620
uh what it does

166
00:12:19,620 --> 00:12:29,940
is really call uh csops with 12. uh 12 is csops clear installer which uh i i took the uh i took

167
00:12:29,940 --> 00:12:35,300
the liberty of of pasting like the screenshot from the exonu source code which basically uh

168
00:12:35,300 --> 00:12:42,560
removes as you can see like this is a not uh the tilde uh is a not flag basic binary not flag that

169
00:12:42,560 --> 00:12:48,280
removes the cs installer and other stuff as well cs installer is the com apple rootless install and

170
00:12:48,280 --> 00:12:48,560
cs

171
00:12:48,560 --> 00:12:55,060
exec inherit sip is the uh rootless install heritable entitlement by the way um so basically

172
00:12:55,060 --> 00:13:00,600
what it does is to remove the uh installation capabilities or c bypassing capabilities of a

173
00:13:00,600 --> 00:13:07,300
process and if it's successful in doing so it will basically run exec ve on the uh on the

174
00:13:07,300 --> 00:13:11,240
like command line and arguments that it got uh and that's basically a

175
00:13:11,640 --> 00:13:18,380
some mean uh that uh that they have to run a file without having those uh seed bypassing capabilities

176
00:13:18,960 --> 00:13:26,140
so that's just a motivation and we were kind of like uh we were kind of convinced that uh drop

177
00:13:26,140 --> 00:13:32,320
sip is legitimate it's not malware it's it's owned by apple and basically what it does is to drop

178
00:13:32,320 --> 00:13:36,500
those seat bypassing capabilities so this is kind of where our journey begin

179
00:13:37,240 --> 00:13:44,520
um we noticed that uh the drop sip uh process is a child process of system migration d

180
00:13:44,520 --> 00:13:48,020
which is a daemon that's why it has a d in the end of its name

181
00:13:48,560 --> 00:13:59,440
And it has the com.apple.ruthless install heritable entitlement, which, if you remember from three slides ago, basically inherits C-bypassing capabilities to all its child processes.

182
00:13:59,740 --> 00:14:04,200
And that explains why DropSIP assumed that it has C-bypassing capabilities to begin with.

183
00:14:04,360 --> 00:14:05,260
I hope that makes sense.

184
00:14:06,320 --> 00:14:15,100
And after concluding that DropSIP is legitimate, we basically decided to take a closer look at what other child processes system migration D has, right?

185
00:14:15,100 --> 00:14:22,060
Because it's a very powerful process, it's able to give all its child processes C-bypassing capabilities, just for fun.

186
00:14:22,840 --> 00:14:24,940
It depends on your definition of fun.

187
00:14:25,660 --> 00:14:35,100
And then this is a screenshot just showing the entitlements of this system migration D process.

188
00:14:35,460 --> 00:14:36,580
You can use code sign.

189
00:14:36,760 --> 00:14:41,980
That's the binary that Apple gives you to basically look at the signature, and that includes the entitlements.

190
00:14:42,160 --> 00:14:45,080
And as you can see, the set of entitlements.

191
00:14:45,100 --> 00:14:51,820
There are three entitlements that start with com.apple.ruthless, and the second one is com.apple.ruthless install heritable.

192
00:14:52,020 --> 00:14:56,280
I won't talk about the other two, but they're really interesting if you're into that kind of stuff.

193
00:14:57,960 --> 00:15:12,020
Now, this is, again, not a talk about Microsoft and EDR and everything, but any EDR that it's worth its salt, you can basically ask questions like, hey, in my organization, give me all the processes that have so and so, right?

194
00:15:12,120 --> 00:15:14,720
All the processes that have command line blah and so on.

195
00:15:15,100 --> 00:15:42,220
So what we started doing is that, okay, we're Microsoft, we have an EDR, we have tons of data, even from macOS, and then we were like, okay, let's start hunting with EDR data, and that's really good because you have a lot of different environments, a lot of different customers and whatnot, and also internally in Microsoft, we do have folks that run macOS as well, and they also report all the command lines and whatnot internally, right?

196
00:15:42,480 --> 00:15:44,820
So we were like, okay, give us.

197
00:15:45,100 --> 00:15:49,520
Dear EDR, please give us all the child processes of system migration D.

198
00:15:49,800 --> 00:15:55,720
And we immediately noticed two interesting child processes, which are bash and Perl, right?

199
00:15:55,760 --> 00:15:57,000
These are just command lines.

200
00:15:58,040 --> 00:16:03,460
Again, these are child processes of system migration D, so they're very powerful in terms of C bypassing capabilities.

201
00:16:04,920 --> 00:16:07,460
Why are those child processes interesting?

202
00:16:08,800 --> 00:16:12,140
Well, bash and Perl are interesting because they're interpreters.

203
00:16:12,240 --> 00:16:15,080
And interpreters are affected by many things.

204
00:16:15,100 --> 00:16:18,140
Especially environment variable poisonings.

205
00:16:18,280 --> 00:16:26,260
Now, in macOS, I won't talk too much about the security mechanisms in macOS, but injection in macOS is a real drag.

206
00:16:26,420 --> 00:16:30,300
It's not like Windows or Linux when you can just run open process or ptrace.

207
00:16:30,580 --> 00:16:38,080
And especially bash and Perl are still baked into macOS, and therefore Apple signed and actually are protected by SIP.

208
00:16:38,220 --> 00:16:43,800
So you can't get a task port to those processes, and you can't inject into them.

209
00:16:43,800 --> 00:16:49,800
And that's why we needed like a different method of injecting to those processes.

210
00:16:50,060 --> 00:16:53,100
And because they're interpreters, they're more convenient than others.

211
00:16:53,420 --> 00:16:57,800
Now, remember, these are processes that are child processes of system migration D.

212
00:16:57,940 --> 00:17:03,060
So the OS does not enforce SIP file system policy checks on them, which is really helpful.

213
00:17:04,600 --> 00:17:07,580
And then I want to talk about environment variables.

214
00:17:07,780 --> 00:17:11,020
So we found two noteworthy environment variables.

215
00:17:11,620 --> 00:17:13,380
These are just man pages.

216
00:17:13,380 --> 00:17:14,920
Of bash and Perl.

217
00:17:15,420 --> 00:17:18,920
For bash, you have environment variable bash underscore env.

218
00:17:19,060 --> 00:17:24,100
And apparently, if you have that environment variable, you can just like write arbitrary commands there.

219
00:17:24,260 --> 00:17:27,840
And like bash will just run them, which is good and bad.

220
00:17:29,060 --> 00:17:34,820
For Perl, it's not really complicated, but you have Perl 5 opt for options.

221
00:17:35,180 --> 00:17:38,820
And you can also make Perl 5 opt by modifying it.

222
00:17:39,060 --> 00:17:43,360
You can make it run arbitrary Perl commands, which is really good.

223
00:17:43,380 --> 00:17:45,380
And it can be great and bad at the same time.

224
00:17:47,180 --> 00:17:49,920
Now, this is like I'm doing a sidetrack here.

225
00:17:50,040 --> 00:17:52,860
This is a general rant about environment variables.

226
00:17:53,240 --> 00:17:58,200
Shellshock happened in 2014, if you guys remember how bad it was.

227
00:17:58,320 --> 00:18:08,680
Basically, it was like a vulnerability in bash that was related to the parsing of environment variables and how they're eventually executing.

228
00:18:09,080 --> 00:18:13,360
But it's like we haven't learned a lot about the dangers of environment variables.

229
00:18:13,380 --> 00:18:20,760
And it just took like the last couple of years, even this year, like in different platforms, really.

230
00:18:20,840 --> 00:18:21,940
They're not all Mac OS.

231
00:18:22,260 --> 00:18:26,880
Like if you look at it, like the first one from 2023 is in Linux, right?

232
00:18:27,040 --> 00:18:36,620
In a pseudo binary, in a suite binary, no less, which took years to really make secure and apparently not enough.

233
00:18:37,140 --> 00:18:41,760
And you have other cases here as well, including Linux.

234
00:18:41,760 --> 00:18:45,220
Including Mac OS.

235
00:18:45,540 --> 00:18:47,340
And other things as well.

236
00:18:47,620 --> 00:18:51,640
And that doesn't even start like scratching the surface.

237
00:18:52,040 --> 00:18:55,640
Because you have other issues that do not normally get CVEs.

238
00:18:55,800 --> 00:18:59,900
Like UAC bypasses on Windows and you can override like the WinDir directory.

239
00:19:00,520 --> 00:19:06,040
Or cloud credentials that are in environment variables and API keys like literally everywhere.

240
00:19:06,380 --> 00:19:08,560
So environment variables are very dangerous.

241
00:19:08,660 --> 00:19:11,740
And should be, you know, should be taken care of.

242
00:19:11,740 --> 00:19:18,620
And this is where I turn over to Mike to talk about our exploitation strategy.

243
00:19:20,880 --> 00:19:23,680
That man with the flask is a god damn hero.

244
00:19:23,960 --> 00:19:25,400
This is a fantastic tradition.

245
00:19:25,640 --> 00:19:26,360
I just wanted to say that.

246
00:19:26,480 --> 00:19:27,540
So thank you for that.

247
00:19:28,880 --> 00:19:33,460
Yeah, so like JB was talking about, the environment variables were the main thing that we went after.

248
00:19:33,560 --> 00:19:34,400
Environment variable poisoning.

249
00:19:35,220 --> 00:19:41,720
So we went about trying to validate this as a vulnerability that can be exploited.

250
00:19:41,720 --> 00:19:43,860
And we loaded by setting Bash EMV and Perl 5 opt.

251
00:19:44,540 --> 00:19:47,300
And from there we put the payload in the appropriate folder.

252
00:19:47,560 --> 00:19:52,420
And it was just simply a matter of getting system migration D to run one of these two interpreters.

253
00:19:52,500 --> 00:19:54,000
Which is a lot easier said than done.

254
00:19:54,480 --> 00:20:00,120
It felt like every single combination I tried didn't result in Bash or Perl being run at the end.

255
00:20:00,240 --> 00:20:01,040
Which was frustrating.

256
00:20:01,140 --> 00:20:06,060
But eventually was able to find the right combination of just creating like a single dummy user.

257
00:20:06,260 --> 00:20:09,240
And from there was able to get Perl to run.

258
00:20:09,360 --> 00:20:10,480
And that was like 4 a.m.

259
00:20:10,480 --> 00:20:11,740
I was talking to Neurug who's in India.

260
00:20:11,960 --> 00:20:16,860
And he came up with Perl 5 opt exploit.

261
00:20:17,060 --> 00:20:18,300
And yeah.

262
00:20:18,400 --> 00:20:23,300
When I finally got to execute and validate that we got SIP bypass it was an amazing feeling.

263
00:20:23,500 --> 00:20:25,140
And I was also like quite sleep deprived.

264
00:20:27,400 --> 00:20:28,300
So yeah.

265
00:20:28,340 --> 00:20:30,960
While we did prove that this is something that can be exploited.

266
00:20:31,400 --> 00:20:37,820
It wasn't perfect because we required like a physical USB drive to be attached to the device.

267
00:20:39,200 --> 00:20:39,680
Migration.

268
00:20:39,680 --> 00:20:42,720
As you may or may not know will log off all users.

269
00:20:43,560 --> 00:20:45,680
Requires manual clicking through all the windows.

270
00:20:46,560 --> 00:20:48,380
And then of course it reboots at the end.

271
00:20:48,500 --> 00:20:51,600
So that's not ideal for a remote attacker.

272
00:20:55,160 --> 00:20:57,880
So this was a demo that we sent to Apple.

273
00:20:57,980 --> 00:20:58,660
I'm going to spare you all.

274
00:20:58,680 --> 00:21:01,900
I'm not going to make you watch a 15 minute migration demo of me.

275
00:21:03,000 --> 00:21:04,980
Namering on about the migration process.

276
00:21:05,220 --> 00:21:07,180
But I just want to show a snapshot here.

277
00:21:07,640 --> 00:21:08,080
Where.

278
00:21:08,080 --> 00:21:12,220
At the end we're writing over the Apple kex exclude file.

279
00:21:12,400 --> 00:21:14,160
So if you don't know.

280
00:21:14,300 --> 00:21:15,700
Apple kicked everyone out of the kernel.

281
00:21:16,240 --> 00:21:22,360
But there were certain kernel modules that Apple still allowed to be loaded and executed.

282
00:21:22,820 --> 00:21:28,040
And all that's kept in a SIP protected file called Apple kex exclude list.

283
00:21:28,660 --> 00:21:32,420
So in the demo I overwrote that file with just the word migraine.

284
00:21:32,520 --> 00:21:37,220
As like a proof of concept to show that we can control these SIP protected areas.

285
00:21:40,060 --> 00:21:40,500
Okay.

286
00:21:40,600 --> 00:21:41,320
So like I said.

287
00:21:41,680 --> 00:21:44,940
The initial demo and everything was pretty ugly.

288
00:21:45,360 --> 00:21:49,840
So the main challenges here were to obviously get rid of all log off.

289
00:21:49,920 --> 00:21:50,520
Get rid of reboot.

290
00:21:50,740 --> 00:21:51,860
We wanted to automate clicking.

291
00:21:52,020 --> 00:21:53,800
So there's no user interaction needed.

292
00:21:53,900 --> 00:21:57,980
And obviously we don't want to have a USB of physical access for this exploit to run.

293
00:21:58,440 --> 00:22:02,580
So we began reversing and trying to figure out how we can make that happen.

294
00:22:02,740 --> 00:22:04,600
So there's a top down approach and a bottom up.

295
00:22:04,940 --> 00:22:05,740
Top down.

296
00:22:05,740 --> 00:22:13,040
Was a very disgusting approach where we tried patching the system binaries themselves to get the behavior we want.

297
00:22:13,100 --> 00:22:15,000
Obviously and naturally I took the disgusting approach.

298
00:22:15,120 --> 00:22:15,540
Top down.

299
00:22:16,020 --> 00:22:22,660
Bottom up was the more cleaner approach where we took the private framework that the migration daemon uses.

300
00:22:23,120 --> 00:22:25,740
And we tried to bend it to our will.

301
00:22:25,920 --> 00:22:31,240
And call the functionality we need within that private framework directly with our own binary.

302
00:22:31,800 --> 00:22:32,460
Spoiler alert.

303
00:22:32,640 --> 00:22:34,320
Neither of these approaches worked.

304
00:22:34,400 --> 00:22:35,720
And we'll get into why that is.

305
00:22:36,900 --> 00:22:37,380
Okay.

306
00:22:39,320 --> 00:22:44,160
So migration like with most things in Mac is not a simple system.

307
00:22:44,380 --> 00:22:44,880
It's complex.

308
00:22:45,360 --> 00:22:50,780
And it's multiple different processes that communicate through XPC and IPC to make this happen.

309
00:22:52,800 --> 00:22:57,280
We were trying to find some kind of documentation on migration and how it all works.

310
00:22:57,380 --> 00:23:00,940
And of course Apple being Apple didn't offer us any of that documentation.

311
00:23:01,200 --> 00:23:04,300
And we couldn't find anyone who's not doing this and reversing it.

312
00:23:04,380 --> 00:23:05,700
So as far as we could find.

313
00:23:05,700 --> 00:23:06,780
We're the first ones to do it.

314
00:23:07,560 --> 00:23:10,360
So let's get into the high level of migration.

315
00:23:11,760 --> 00:23:13,620
So these blue squares.

316
00:23:13,840 --> 00:23:15,980
These are the key processes involved with migration.

317
00:23:17,600 --> 00:23:20,740
You can kind of think of like migration as like a chain.

318
00:23:21,000 --> 00:23:23,300
And each link in the chain calls into the next.

319
00:23:23,440 --> 00:23:29,080
And the previous link validates that the previous caller has the appropriate private entitlement.

320
00:23:29,600 --> 00:23:33,200
So an example being migration assistant will call into MBCIS administration.

321
00:23:33,700 --> 00:23:34,720
But then MBCIS administration.

322
00:23:34,720 --> 00:23:36,640
Before it goes any further.

323
00:23:36,720 --> 00:23:41,940
Will validate that it has com.apple.private.MBCIS administration entitlement.

324
00:23:42,140 --> 00:23:43,960
And system administration calls in a setup assistant.

325
00:23:44,180 --> 00:23:45,540
And setup assistant calls into the daemon.

326
00:23:45,660 --> 00:23:47,480
All of which validate the previous caller.

327
00:23:50,300 --> 00:23:50,740
Okay.

328
00:23:50,800 --> 00:23:51,640
So migration assistant.

329
00:23:51,860 --> 00:23:54,580
This is the first link in the proverbial chain.

330
00:23:55,120 --> 00:23:57,800
And this is what you all are used to using if you've ever done migration.

331
00:23:58,360 --> 00:24:00,940
It's essentially the setup wizard for migration.

332
00:24:01,080 --> 00:24:04,360
Where you can port PC or Mac devices.

333
00:24:04,360 --> 00:24:05,400
You can do it over hardware.

334
00:24:05,520 --> 00:24:06,580
You can do it over network.

335
00:24:06,860 --> 00:24:07,820
All different options.

336
00:24:08,020 --> 00:24:09,400
So with the top down approach.

337
00:24:09,600 --> 00:24:10,660
I wanted to patch this out.

338
00:24:10,800 --> 00:24:13,840
Because the most annoying thing we had to deal with was the logout issue.

339
00:24:14,480 --> 00:24:15,460
So if you're interested.

340
00:24:15,740 --> 00:24:20,840
The function that migration assistant uses is something called saclo start logout with options.

341
00:24:22,180 --> 00:24:25,220
Patching that out unfortunately didn't work for multiple reasons.

342
00:24:25,540 --> 00:24:26,600
And we'll show you why.

343
00:24:28,260 --> 00:24:28,840
Oh yeah.

344
00:24:28,900 --> 00:24:31,800
So this was a little funny thing that JBO noticed.

345
00:24:31,880 --> 00:24:33,740
So when you go from PC.

346
00:24:33,740 --> 00:24:35,920
To a MacBook.

347
00:24:36,680 --> 00:24:40,000
Apple was kind enough to represent the PC as having a blue screen of death.

348
00:24:40,200 --> 00:24:42,720
So well played Apple.

349
00:24:42,840 --> 00:24:43,260
Good job.

350
00:24:45,920 --> 00:24:46,400
Okay.

351
00:24:46,520 --> 00:24:47,100
So the next link.

352
00:24:47,180 --> 00:24:50,220
So migration assistant will then talk with MBCIS administration.

353
00:24:51,720 --> 00:24:53,100
And like I mentioned.

354
00:24:53,300 --> 00:24:57,700
It'll make sure the XPC caller has the appropriate entitlement.

355
00:24:57,800 --> 00:24:59,580
The MBCIS administration entitlement.

356
00:25:01,160 --> 00:25:03,720
I obviously tried calling MBCIS.

357
00:25:03,740 --> 00:25:04,540
Administration directly.

358
00:25:04,760 --> 00:25:06,640
Thinking oh we can get around the logout.

359
00:25:06,760 --> 00:25:08,020
By just making our own binary.

360
00:25:08,440 --> 00:25:09,780
And at the bottom here.

361
00:25:10,320 --> 00:25:11,280
As you can see.

362
00:25:12,240 --> 00:25:13,660
This is the console output of it.

363
00:25:13,720 --> 00:25:14,500
Telling me to fuck off.

364
00:25:15,020 --> 00:25:15,140
So.

365
00:25:18,860 --> 00:25:19,800
You might be wondering.

366
00:25:19,880 --> 00:25:22,020
How does migration work?

367
00:25:22,560 --> 00:25:24,980
How is a user able to interact with a GUI.

368
00:25:25,820 --> 00:25:27,700
Even though all the users are logged out.

369
00:25:27,880 --> 00:25:29,180
And the answer to that is.

370
00:25:29,260 --> 00:25:30,880
There's a hidden user called MV setup user.

371
00:25:31,920 --> 00:25:32,680
MBCIS administration.

372
00:25:32,680 --> 00:25:34,100
Will essentially.

373
00:25:35,680 --> 00:25:37,840
Use this user for the entire process.

374
00:25:37,900 --> 00:25:40,020
So you're not actually running as your user.

375
00:25:40,120 --> 00:25:41,420
You're running as this hidden user.

376
00:25:42,220 --> 00:25:43,180
There's no password.

377
00:25:43,280 --> 00:25:44,520
So we tried logging into it.

378
00:25:44,640 --> 00:25:47,020
And I thought we could get away with doing some fun trickery.

379
00:25:47,140 --> 00:25:47,320
But.

380
00:25:47,900 --> 00:25:49,580
Those darn entitlements got us again.

381
00:25:52,000 --> 00:25:52,480
Okay.

382
00:25:52,540 --> 00:25:53,360
So setup assistant.

383
00:25:53,900 --> 00:25:54,380
So.

384
00:25:55,060 --> 00:25:57,080
The MBCIS administration process.

385
00:25:57,260 --> 00:26:00,380
Will eventually call into setup assistant.

386
00:26:00,580 --> 00:26:02,380
Setup assistant is like a generic utility.

387
00:26:02,680 --> 00:26:02,960
That can be used.

388
00:26:03,160 --> 00:26:04,840
By a lot of different things.

389
00:26:04,920 --> 00:26:05,820
In the system.

390
00:26:06,000 --> 00:26:07,240
Some examples would be like.

391
00:26:07,320 --> 00:26:08,100
System upgrade.

392
00:26:08,220 --> 00:26:08,660
Or.

393
00:26:09,100 --> 00:26:09,980
Accessibility wizard.

394
00:26:10,200 --> 00:26:10,920
Or of course migration.

395
00:26:11,220 --> 00:26:12,460
And a whole lot of other things.

396
00:26:13,300 --> 00:26:15,180
And MBCIS administration essentially.

397
00:26:15,440 --> 00:26:16,940
Will talk to setup assistant.

398
00:26:17,300 --> 00:26:19,140
And it'll put it into the context of migration.

399
00:26:19,640 --> 00:26:20,940
And eventually it'll transfer.

400
00:26:21,540 --> 00:26:22,260
Migration assistant.

401
00:26:22,600 --> 00:26:23,080
Into.

402
00:26:24,040 --> 00:26:25,160
Setup assistant context.

403
00:26:25,300 --> 00:26:27,220
So that's basically what's being called.

404
00:26:27,460 --> 00:26:28,400
After a certain point.

405
00:26:28,460 --> 00:26:29,540
Instead of migration assistant.

406
00:26:30,700 --> 00:26:31,580
Of course.

407
00:26:31,580 --> 00:26:32,520
When it does that.

408
00:26:32,680 --> 00:26:33,280
It's validating.

409
00:26:33,280 --> 00:26:34,440
That the entitlement.

410
00:26:34,560 --> 00:26:34,960
Is improved.

411
00:26:35,840 --> 00:26:36,240
Approved.

412
00:26:36,260 --> 00:26:37,640
Before it continues to do that.

413
00:26:37,800 --> 00:26:38,460
And then from there.

414
00:26:38,500 --> 00:26:38,900
Setup assistant.

415
00:26:39,080 --> 00:26:40,000
Will talk with the main.

416
00:26:40,580 --> 00:26:41,280
Main honcho.

417
00:26:41,340 --> 00:26:41,720
Which is.

418
00:26:42,080 --> 00:26:42,720
Migration assistant.

419
00:26:43,220 --> 00:26:43,520
Or.

420
00:26:43,740 --> 00:26:44,140
Daemon.

421
00:26:44,240 --> 00:26:45,240
The migration daemon.

422
00:26:45,900 --> 00:26:46,600
And it does this with.

423
00:26:46,680 --> 00:26:47,080
XPC.

424
00:26:47,180 --> 00:26:47,540
And of course.

425
00:26:47,580 --> 00:26:48,600
The system migration D.

426
00:26:48,660 --> 00:26:49,220
Will validate.

427
00:26:49,320 --> 00:26:50,600
That the caller has the.

428
00:26:50,740 --> 00:26:51,500
Right entitlement.

429
00:26:51,640 --> 00:26:52,340
In this case.

430
00:26:52,400 --> 00:26:52,800
It would be.

431
00:26:53,100 --> 00:26:53,500
Private.

432
00:26:53,640 --> 00:26:54,320
System migration.

433
00:26:54,620 --> 00:26:55,160
Daemon client.

434
00:26:55,680 --> 00:26:56,340
By the way.

435
00:26:56,400 --> 00:26:56,800
Setup assistant.

436
00:26:56,980 --> 00:26:57,380
Is like.

437
00:26:57,940 --> 00:26:58,340
Filled.

438
00:26:58,560 --> 00:26:59,300
With entitlement.

439
00:26:59,460 --> 00:26:59,920
So if you're looking.

440
00:26:59,980 --> 00:27:00,760
For an interesting target.

441
00:27:01,100 --> 00:27:01,980
I recommend going.

442
00:27:02,060 --> 00:27:02,480
Setup assistant.

443
00:27:02,740 --> 00:27:03,180
And if not.

444
00:27:03,280 --> 00:27:03,720
Setup assistant.

445
00:27:03,920 --> 00:27:04,540
In their folder.

446
00:27:04,620 --> 00:27:05,060
There's other.

447
00:27:05,200 --> 00:27:05,480
Like just.

448
00:27:05,580 --> 00:27:05,980
Utility.

449
00:27:06,520 --> 00:27:06,920
Binaries.

450
00:27:06,940 --> 00:27:07,200
That are.

451
00:27:07,740 --> 00:27:08,140
Ridiculously.

452
00:27:08,460 --> 00:27:08,860
Entitled.

453
00:27:09,040 --> 00:27:09,440
So.

454
00:27:09,980 --> 00:27:10,760
Just some homework.

455
00:27:10,840 --> 00:27:11,040
To do.

456
00:27:12,920 --> 00:27:13,580
All right.

457
00:27:13,640 --> 00:27:14,460
System migration D.

458
00:27:14,580 --> 00:27:15,220
So this was the.

459
00:27:15,260 --> 00:27:15,760
Bottom approach.

460
00:27:15,960 --> 00:27:16,160
That.

461
00:27:16,540 --> 00:27:17,380
Bottom up approach.

462
00:27:17,520 --> 00:27:17,760
That.

463
00:27:17,760 --> 00:27:18,360
Anurag took.

464
00:27:19,900 --> 00:27:20,700
When starting.

465
00:27:20,820 --> 00:27:21,300
To reverse.

466
00:27:21,300 --> 00:27:21,840
A system.

467
00:27:21,920 --> 00:27:22,180
Binary.

468
00:27:22,200 --> 00:27:22,680
We recommend.

469
00:27:22,720 --> 00:27:23,120
You look.

470
00:27:23,140 --> 00:27:23,460
You start.

471
00:27:23,580 --> 00:27:23,880
With the.

472
00:27:24,000 --> 00:27:24,280
XPC.

473
00:27:24,560 --> 00:27:24,840
Handlers.

474
00:27:24,980 --> 00:27:25,400
For like.

475
00:27:25,540 --> 00:27:25,820
Privilege.

476
00:27:26,020 --> 00:27:26,300
Escalation.

477
00:27:26,620 --> 00:27:26,900
Or.

478
00:27:26,920 --> 00:27:27,100
Max.

479
00:27:27,260 --> 00:27:27,540
Services.

480
00:27:28,520 --> 00:27:29,040
You can.

481
00:27:29,080 --> 00:27:29,320
Usually.

482
00:27:29,340 --> 00:27:29,540
Find.

483
00:27:29,640 --> 00:27:29,760
Those.

484
00:27:29,800 --> 00:27:29,920
By.

485
00:27:29,940 --> 00:27:30,180
Opening.

486
00:27:30,220 --> 00:27:30,300
Up.

487
00:27:30,300 --> 00:27:30,400
The.

488
00:27:30,540 --> 00:27:30,820
Associated.

489
00:27:30,860 --> 00:27:30,980
P.

490
00:27:31,020 --> 00:27:31,200
List.

491
00:27:31,780 --> 00:27:32,060
Shown.

492
00:27:32,100 --> 00:27:32,320
Here.

493
00:27:32,520 --> 00:27:32,800
And.

494
00:27:49,520 --> 00:27:49,800
This.

495
00:27:49,800 --> 00:27:49,960
Object.

496
00:27:49,960 --> 00:27:50,060
The.

497
00:27:50,220 --> 00:27:50,460
Migration.

498
00:27:50,540 --> 00:27:50,780
Object.

499
00:27:50,880 --> 00:27:50,980
That.

500
00:27:51,040 --> 00:27:51,280
Uses.

501
00:27:51,280 --> 00:27:51,480
Along.

502
00:27:51,600 --> 00:27:51,700
With.

503
00:27:51,720 --> 00:27:51,840
The.

504
00:27:51,860 --> 00:27:52,060
Start.

505
00:27:52,320 --> 00:27:52,560
Listener.

506
00:27:52,560 --> 00:27:52,680
For.

507
00:27:52,880 --> 00:27:53,120
Connections.

508
00:27:53,200 --> 00:27:53,440
Function.

509
00:27:53,480 --> 00:27:53,660
Which.

510
00:27:53,700 --> 00:27:53,820
Is.

511
00:27:53,840 --> 00:27:54,020
How.

512
00:27:54,160 --> 00:27:54,280
It.

513
00:27:54,400 --> 00:27:54,640
Handles.

514
00:27:55,000 --> 00:27:55,240
Like.

515
00:27:55,280 --> 00:27:55,340
A.

516
00:27:55,420 --> 00:27:55,640
Callback.

517
00:27:55,740 --> 00:27:55,980
For.

518
00:27:56,140 --> 00:27:56,380
Valid.

519
00:27:56,620 --> 00:27:56,860
XPC.

520
00:27:57,140 --> 00:27:57,380
Requests.

521
00:28:00,420 --> 00:28:00,660
Okay.

522
00:28:00,880 --> 00:28:01,120
So.

523
00:28:01,640 --> 00:28:01,880
When.

524
00:28:01,880 --> 00:28:02,120
It.

525
00:28:02,360 --> 00:28:02,400
Does.

526
00:28:02,800 --> 00:28:03,200
Receive.

527
00:28:03,260 --> 00:28:03,380
A.

528
00:28:03,500 --> 00:28:03,800
Valid.

529
00:28:03,980 --> 00:28:04,380
Migration.

530
00:28:04,440 --> 00:28:04,660
Request.

531
00:28:04,860 --> 00:28:05,260
System.

532
00:28:05,320 --> 00:28:05,640
Migration.

533
00:28:05,640 --> 00:28:05,840
D.

534
00:28:05,880 --> 00:28:06,140
Will.

535
00:28:06,260 --> 00:28:06,620
Create.

536
00:28:06,700 --> 00:28:07,040
A.

537
00:28:07,200 --> 00:28:07,500
File.

538
00:28:07,900 --> 00:28:08,300
In.

539
00:28:08,340 --> 00:28:08,380
The.

540
00:28:08,480 --> 00:28:08,800
Location.

541
00:28:08,840 --> 00:28:09,160
Library.

542
00:28:09,360 --> 00:28:09,660
Slash.

543
00:28:09,760 --> 00:28:10,080
System.

544
00:28:10,140 --> 00:28:10,460
Migration.

545
00:28:10,600 --> 00:28:11,000
Slash.

546
00:28:11,000 --> 00:28:11,200
Q.

547
00:28:12,020 --> 00:28:12,420
And.

548
00:28:12,620 --> 00:28:12,860
In.

549
00:28:12,920 --> 00:28:13,020
There.

550
00:28:13,100 --> 00:28:13,340
Is.

551
00:28:13,380 --> 00:28:13,560
All.

552
00:28:13,680 --> 00:28:14,060
The.

553
00:28:15,500 --> 00:28:15,900
Associated.

554
00:28:31,880 --> 00:28:31,960
Do.

555
00:28:32,040 --> 00:28:32,200
That.

556
00:28:32,200 --> 00:28:32,420
Only.

557
00:28:32,540 --> 00:28:32,780
System.

558
00:28:32,960 --> 00:28:33,200
Migration.

559
00:28:33,220 --> 00:28:33,380
D.

560
00:28:33,420 --> 00:28:33,560
Can.

561
00:28:34,260 --> 00:28:34,500
Modify.

562
00:28:34,680 --> 00:28:34,920
Create.

563
00:28:35,040 --> 00:28:35,200
Or.

564
00:28:35,240 --> 00:28:35,480
Delete.

565
00:28:35,640 --> 00:28:35,880
Files.

566
00:28:35,900 --> 00:28:36,040
At.

567
00:28:36,060 --> 00:28:36,120
That.

568
00:28:36,360 --> 00:28:36,600
Location.

569
00:28:38,760 --> 00:28:39,000
So.

570
00:28:39,380 --> 00:28:39,620
Anyone.

571
00:28:39,740 --> 00:28:39,980
Who.

572
00:28:40,020 --> 00:28:40,120
Has.

573
00:28:40,160 --> 00:28:40,280
Done.

574
00:28:40,440 --> 00:28:40,680
Migration.

575
00:28:41,220 --> 00:28:41,460
Can.

576
00:28:41,560 --> 00:28:41,740
Tell.

577
00:28:41,820 --> 00:28:41,920
You.

578
00:28:41,940 --> 00:28:42,060
That.

579
00:28:42,080 --> 00:28:42,240
There.

580
00:28:42,340 --> 00:28:42,500
Is.

581
00:28:42,580 --> 00:28:42,680
At.

582
00:28:42,740 --> 00:28:42,820
Least.

583
00:28:42,820 --> 00:28:42,940
One.

584
00:28:43,100 --> 00:28:43,320
Reboot.

585
00:28:43,320 --> 00:28:43,420
If.

586
00:28:43,460 --> 00:28:43,520
Not.

587
00:28:43,580 --> 00:28:43,760
Multiple.

588
00:28:44,020 --> 00:28:44,240
Reboots.

589
00:28:44,360 --> 00:28:44,580
And.

590
00:28:44,740 --> 00:28:44,940
The.

591
00:28:45,020 --> 00:28:45,080
Way.

592
00:28:45,120 --> 00:28:45,180
The.

593
00:28:45,280 --> 00:28:45,400
System.

594
00:28:45,600 --> 00:28:45,820
Can.

595
00:28:45,960 --> 00:28:46,140
Keep.

596
00:28:46,260 --> 00:28:46,460
Track.

597
00:28:46,600 --> 00:28:46,820
Of.

598
00:28:46,840 --> 00:28:47,060
What.

599
00:28:47,140 --> 00:28:47,240
The.

600
00:28:47,260 --> 00:28:47,440
Current.

601
00:28:47,780 --> 00:28:48,000
Migration.

602
00:28:48,060 --> 00:28:48,280
Request.

603
00:28:48,420 --> 00:28:48,640
Is.

604
00:28:48,660 --> 00:28:48,800
Is.

605
00:28:48,820 --> 00:28:48,920
It.

606
00:28:49,000 --> 00:28:49,220
Takes.

607
00:28:49,260 --> 00:28:49,480
The.

608
00:28:50,140 --> 00:28:50,360
One.

609
00:28:50,440 --> 00:28:50,480
Of.

610
00:28:50,660 --> 00:28:50,880
Specified.

611
00:28:51,040 --> 00:28:51,260
Files.

612
00:28:51,260 --> 00:28:51,400
And.

613
00:28:51,500 --> 00:28:51,520
It.

614
00:28:51,720 --> 00:28:51,920
Renames.

615
00:28:51,980 --> 00:28:52,080
It.

616
00:28:52,100 --> 00:28:52,280
To.

617
00:28:52,620 --> 00:28:52,820
In.

618
00:28:52,900 --> 00:28:53,060
Dash.

619
00:28:53,120 --> 00:28:53,320
Flight.

620
00:28:53,540 --> 00:28:53,740
At.

621
00:28:53,800 --> 00:28:53,840
The.

622
00:28:53,920 --> 00:28:53,960
Same.

623
00:28:54,160 --> 00:28:54,360
Location.

624
00:28:54,500 --> 00:28:54,700
That's.

625
00:28:54,880 --> 00:28:55,080
Sit.

626
00:28:55,320 --> 00:28:55,520
Protected.

627
00:28:57,460 --> 00:28:57,660
All.

628
00:28:57,820 --> 00:28:57,920
Right.

629
00:28:57,980 --> 00:28:58,180
So.

630
00:28:58,380 --> 00:28:58,580
Why.

631
00:28:58,640 --> 00:28:58,700
Do.

632
00:28:58,760 --> 00:28:58,780
Our.

633
00:28:58,900 --> 00:28:59,100
Approaches.

634
00:28:59,140 --> 00:28:59,280
Fail.

635
00:28:59,360 --> 00:28:59,500
Well.

636
00:28:59,720 --> 00:28:59,920
Like.

637
00:29:00,000 --> 00:29:00,060
I.

638
00:29:00,320 --> 00:29:00,520
Mentioned.

639
00:29:00,680 --> 00:29:00,880
Several.

640
00:29:01,080 --> 00:29:01,280
Times.

641
00:29:01,540 --> 00:29:01,740
The.

642
00:29:01,820 --> 00:29:02,000
Entitlements.

643
00:29:02,100 --> 00:29:02,160
Were.

644
00:29:02,200 --> 00:29:02,260
The.

645
00:29:02,320 --> 00:29:02,360
Big.

646
00:29:02,460 --> 00:29:02,660
Thing.

647
00:29:02,920 --> 00:29:03,120
So.

648
00:29:03,200 --> 00:29:03,300
Any.

649
00:29:03,340 --> 00:29:03,440
Time.

650
00:29:03,500 --> 00:29:03,580
We.

651
00:29:03,600 --> 00:29:03,780
Tried.

652
00:29:04,000 --> 00:29:04,200
Talking.

653
00:29:04,380 --> 00:29:04,580
Directly.

654
00:29:04,580 --> 00:29:04,720
With.

655
00:29:04,940 --> 00:29:05,140
MbSys.

656
00:29:05,280 --> 00:29:05,480
Administration.

657
00:29:06,520 --> 00:29:06,720
Or.

658
00:29:06,860 --> 00:29:07,060
The.

659
00:29:07,120 --> 00:29:07,320
Daemon.

660
00:29:07,360 --> 00:29:07,560
Itself.

661
00:29:08,220 --> 00:29:08,420
We.

662
00:29:08,520 --> 00:29:08,600
Couldn.

663
00:29:08,640 --> 00:29:08,760
Get.

664
00:29:08,840 --> 00:29:08,980
Very.

665
00:29:09,060 --> 00:29:09,240
Far.

666
00:29:09,280 --> 00:29:09,480
Because.

667
00:29:09,560 --> 00:29:09,700
They.

668
00:29:09,840 --> 00:29:10,040
Validate.

669
00:29:10,060 --> 00:29:10,160
That.

670
00:29:10,160 --> 00:29:10,520
Caller.

671
00:29:10,580 --> 00:29:10,660
Has.

672
00:29:10,800 --> 00:29:10,940
The.

673
00:29:11,120 --> 00:29:11,420
Appropriate.

674
00:29:11,420 --> 00:29:11,640
Private.

675
00:29:11,740 --> 00:29:12,000
Entitlement.

676
00:29:13,080 --> 00:29:13,380
Also.

677
00:29:13,820 --> 00:29:14,120
On.

678
00:29:14,740 --> 00:29:15,040
Newer.

679
00:29:15,140 --> 00:29:15,440
Apple.

680
00:29:15,540 --> 00:29:15,780
Silicon.

681
00:29:15,900 --> 00:29:16,200
Devices.

682
00:29:16,200 --> 00:29:16,400
While.

683
00:29:16,480 --> 00:29:16,560
This.

684
00:29:16,600 --> 00:29:16,780
Isn't.

685
00:29:16,900 --> 00:29:17,200
There.

686
00:29:17,320 --> 00:29:17,400
Are.

687
00:29:17,580 --> 00:29:17,880
Workarounds.

688
00:29:17,920 --> 00:29:18,080
For.

689
00:29:18,100 --> 00:29:18,320
This.

690
00:29:18,700 --> 00:29:19,000
If.

691
00:29:19,160 --> 00:29:19,180
You.

692
00:29:19,220 --> 00:29:19,320
Try.

693
00:29:19,400 --> 00:29:19,460
To.

694
00:29:19,480 --> 00:29:19,640
Like.

695
00:29:19,860 --> 00:29:20,160
Patch.

696
00:29:20,220 --> 00:29:20,380
A.

697
00:29:20,420 --> 00:29:20,580
System.

698
00:29:21,820 --> 00:29:22,120
Binary.

699
00:29:22,560 --> 00:29:22,860
The.

700
00:29:40,160 --> 00:29:40,180
We.

701
00:29:40,400 --> 00:29:40,640
Started.

702
00:29:40,780 --> 00:29:40,960
Thinking.

703
00:29:41,040 --> 00:29:41,220
Maybe.

704
00:29:41,320 --> 00:29:41,420
There's.

705
00:29:41,460 --> 00:29:41,520
A.

706
00:29:41,640 --> 00:29:41,760
Way.

707
00:29:41,880 --> 00:29:42,120
That.

708
00:29:42,160 --> 00:29:42,300
We.

709
00:29:42,340 --> 00:29:42,460
Can.

710
00:29:42,600 --> 00:29:42,840
You.

711
00:29:42,960 --> 00:29:43,020
Know.

712
00:29:43,060 --> 00:29:43,300
Cut.

713
00:29:43,400 --> 00:29:43,600
Out.

714
00:29:43,900 --> 00:29:44,140
Migration.

715
00:29:44,180 --> 00:29:44,420
Assistant.

716
00:29:44,820 --> 00:29:45,060
And.

717
00:29:45,100 --> 00:29:45,200
Just.

718
00:29:45,240 --> 00:29:45,340
Talk.

719
00:29:45,420 --> 00:29:45,500
With.

720
00:29:45,560 --> 00:29:45,720
Setup.

721
00:29:45,760 --> 00:29:45,960
Assistant.

722
00:29:46,280 --> 00:29:46,520
Directly.

723
00:29:47,820 --> 00:29:48,060
And.

724
00:29:48,720 --> 00:29:48,960
We.

725
00:30:04,700 --> 00:30:04,940
Had.

726
00:30:04,940 --> 00:30:05,080
An.

727
00:30:05,080 --> 00:30:05,220
In-House.

728
00:30:05,580 --> 00:30:05,820
Tool.

729
00:30:05,820 --> 00:30:05,940
That.

730
00:30:05,980 --> 00:30:06,100
We.

731
00:30:06,440 --> 00:30:06,640
Setup.

732
00:30:06,660 --> 00:30:06,820
Assistant.

733
00:30:07,040 --> 00:30:07,240
Directly.

734
00:30:07,280 --> 00:30:07,480
To.

735
00:30:07,920 --> 00:30:08,120
Create.

736
00:30:08,300 --> 00:30:08,400
The.

737
00:30:08,640 --> 00:30:08,840
Migration.

738
00:30:09,680 --> 00:30:09,880
Behavior.

739
00:30:10,100 --> 00:30:10,280
So.

740
00:30:10,340 --> 00:30:10,440
We.

741
00:30:10,500 --> 00:30:10,580
Can.

742
00:30:11,740 --> 00:30:11,940
Prevent.

743
00:30:12,000 --> 00:30:12,080
The.

744
00:30:12,140 --> 00:30:12,200
Log.

745
00:30:12,260 --> 00:30:12,400
Out.

746
00:30:12,680 --> 00:30:12,880
And.

747
00:30:13,220 --> 00:30:13,420
To.

748
00:30:13,440 --> 00:30:13,560
Begin.

749
00:30:13,600 --> 00:30:13,760
With.

750
00:30:14,200 --> 00:30:14,400
So.

751
00:30:14,520 --> 00:30:14,720
As.

752
00:30:14,800 --> 00:30:14,920
We.

753
00:30:15,460 --> 00:30:15,660
Looked.

754
00:30:15,880 --> 00:30:16,080
Into.

755
00:30:16,240 --> 00:30:16,440
The.

756
00:30:16,840 --> 00:30:17,020
Reversing.

757
00:30:17,020 --> 00:30:17,180
The.

758
00:30:17,480 --> 00:30:17,660
Setup.

759
00:30:17,700 --> 00:30:17,880
Assistant.

760
00:30:18,020 --> 00:30:18,140
We.

761
00:30:18,180 --> 00:30:18,280
Did.

762
00:30:18,440 --> 00:30:18,620
Realize.

763
00:30:18,620 --> 00:30:18,740
There.

764
00:30:18,800 --> 00:30:18,960
Were.

765
00:30:19,620 --> 00:30:19,800
Other.

766
00:30:19,960 --> 00:30:20,140
Parameters.

767
00:30:20,220 --> 00:30:20,360
Being.

768
00:30:20,560 --> 00:30:20,740
Used.

769
00:30:21,160 --> 00:30:21,340
And.

770
00:30:21,440 --> 00:30:21,620
We'll.

771
00:30:21,680 --> 00:30:21,760
Show.

772
00:30:21,840 --> 00:30:21,920
That.

773
00:30:21,960 --> 00:30:22,040
Right.

774
00:30:22,100 --> 00:30:22,240
Here.

775
00:30:23,020 --> 00:30:23,200
So.

776
00:30:23,240 --> 00:30:23,320
This.

777
00:30:23,340 --> 00:30:23,380
Is.

778
00:30:23,380 --> 00:30:23,460
The.

779
00:30:23,520 --> 00:30:23,560
Main.

780
00:30:23,780 --> 00:30:23,960
Handler.

781
00:30:24,020 --> 00:30:24,200
From.

782
00:30:24,240 --> 00:30:24,400
Anybody.

783
00:30:24,560 --> 00:30:24,740
Us.

784
00:30:39,460 --> 00:30:39,640
So.

785
00:30:39,640 --> 00:30:39,720
We.

786
00:30:40,000 --> 00:30:40,200
Figured.

787
00:30:40,580 --> 00:30:40,780
Okay.

788
00:30:40,840 --> 00:30:40,900
There.

789
00:30:40,980 --> 00:30:41,040
Might.

790
00:30:41,060 --> 00:30:41,120
Be.

791
00:30:41,140 --> 00:30:41,260
Something.

792
00:30:41,340 --> 00:30:41,500
To.

793
00:30:41,560 --> 00:30:41,760
This.

794
00:30:42,260 --> 00:30:42,460
Passing.

795
00:30:42,520 --> 00:30:42,720
Setup.

796
00:30:42,720 --> 00:30:42,920
Assistant.

797
00:30:43,240 --> 00:30:43,440
Parameter.

798
00:30:44,060 --> 00:30:44,260
To.

799
00:30:44,320 --> 00:30:44,420
Get.

800
00:30:44,420 --> 00:30:44,520
This.

801
00:30:44,540 --> 00:30:44,620
To.

802
00:30:44,620 --> 00:30:44,700
Run.

803
00:30:44,940 --> 00:30:45,140
Migration.

804
00:30:45,740 --> 00:30:45,940
So.

805
00:30:46,520 --> 00:30:46,720
While.

806
00:30:46,860 --> 00:30:46,940
The.

807
00:30:47,060 --> 00:30:47,140
Main.

808
00:30:47,400 --> 00:30:47,600
Function.

809
00:30:47,620 --> 00:30:47,800
Didn't.

810
00:30:47,860 --> 00:30:47,960
Have.

811
00:30:48,000 --> 00:30:48,100
What.

812
00:30:48,160 --> 00:30:48,200
We.

813
00:30:48,280 --> 00:30:48,480
Wanted.

814
00:30:48,480 --> 00:30:48,560
We.

815
00:30:48,640 --> 00:30:48,820
Looked.

816
00:30:48,840 --> 00:30:49,040
Further.

817
00:30:49,160 --> 00:30:49,360
And.

818
00:30:49,440 --> 00:30:49,500
We.

819
00:30:49,560 --> 00:30:49,680
Found.

820
00:30:49,760 --> 00:30:49,820
A.

821
00:30:49,860 --> 00:30:50,040
Function.

822
00:30:50,120 --> 00:30:50,320
Called.

823
00:30:50,620 --> 00:30:50,820
Use.

824
00:30:51,020 --> 00:30:51,220
Debug.

825
00:30:51,400 --> 00:30:51,600
Parameters.

826
00:30:51,660 --> 00:30:51,780
And.

827
00:30:51,800 --> 00:30:51,980
In.

828
00:30:52,040 --> 00:30:52,140
There.

829
00:30:52,740 --> 00:30:52,940
Is.

830
00:30:53,040 --> 00:30:53,240
A.

831
00:30:53,520 --> 00:30:53,720
Parameter.

832
00:30:53,780 --> 00:30:53,840
It.

833
00:30:53,860 --> 00:30:54,040
Handles.

834
00:30:54,040 --> 00:30:54,240
Called.

835
00:30:54,400 --> 00:30:54,600
Dash.

836
00:30:54,620 --> 00:30:54,820
MB.

837
00:30:55,120 --> 00:30:55,320
Debug.

838
00:30:55,500 --> 00:30:55,700
And.

839
00:30:55,780 --> 00:30:55,920
When.

840
00:30:55,960 --> 00:30:56,020
We.

841
00:30:56,080 --> 00:30:56,180
Use.

842
00:30:56,220 --> 00:30:56,340
That.

843
00:30:56,340 --> 00:30:56,460
We.

844
00:30:56,600 --> 00:30:56,720
Were.

845
00:30:57,160 --> 00:30:57,460
Super.

846
00:30:57,640 --> 00:30:57,940
Excited.

847
00:30:57,940 --> 00:30:58,100
To.

848
00:30:58,140 --> 00:30:58,340
See.

849
00:30:58,380 --> 00:30:58,680
That.

850
00:30:58,700 --> 00:30:58,840
The.

851
00:30:58,920 --> 00:30:59,060
Old.

852
00:30:59,200 --> 00:30:59,500
Familiar.

853
00:30:59,700 --> 00:31:00,000
Migration.

854
00:31:00,240 --> 00:31:00,540
Windows.

855
00:31:00,680 --> 00:31:00,840
Were.

856
00:31:00,880 --> 00:31:01,100
Up.

857
00:31:01,100 --> 00:31:01,260
In.

858
00:31:02,460 --> 00:31:02,760
Yeah.

859
00:31:02,940 --> 00:31:03,240
That.

860
00:31:03,380 --> 00:31:03,660
Means.

861
00:31:03,940 --> 00:31:04,120
No.

862
00:31:04,200 --> 00:31:04,400
Log.

863
00:31:04,400 --> 00:31:04,520
Out.

864
00:31:04,540 --> 00:31:04,800
Needed.

865
00:31:04,800 --> 00:31:04,960
If.

866
00:31:05,020 --> 00:31:05,140
You.

867
00:31:05,780 --> 00:31:06,080
Bypass.

868
00:31:06,300 --> 00:31:06,600
Migration.

869
00:31:06,660 --> 00:31:06,880
Assistant.

870
00:31:07,600 --> 00:31:07,900
You.

871
00:31:07,980 --> 00:31:08,280
Bypass.

872
00:31:08,500 --> 00:31:08,680
Logging.

873
00:31:08,700 --> 00:31:08,800
Out.

874
00:31:10,060 --> 00:31:10,240
So.

875
00:31:11,420 --> 00:31:11,600
Yeah.

876
00:31:12,120 --> 00:31:12,300
While.

877
00:31:12,480 --> 00:31:12,560
It.

878
00:31:12,600 --> 00:31:12,620
Was.

879
00:31:12,780 --> 00:31:12,960
Great.

880
00:31:13,060 --> 00:31:13,160
To.

881
00:31:13,200 --> 00:31:13,260
See.

882
00:31:13,480 --> 00:31:13,660
Migration.

883
00:31:13,700 --> 00:31:13,800
It.

884
00:31:13,860 --> 00:31:14,020
Still.

885
00:31:14,080 --> 00:31:14,260
Was.

886
00:31:14,440 --> 00:31:14,620
A.

887
00:31:14,760 --> 00:31:14,860
Bit.

888
00:31:14,940 --> 00:31:15,000
Of.

889
00:31:15,000 --> 00:31:15,060
A.

890
00:31:15,060 --> 00:31:15,220
Problem.

891
00:31:15,280 --> 00:31:15,360
With.

892
00:31:15,620 --> 00:31:15,800
Automating.

893
00:31:15,980 --> 00:31:16,160
Because.

894
00:31:16,240 --> 00:31:16,380
There.

895
00:31:16,440 --> 00:31:16,500
Were.

896
00:31:16,540 --> 00:31:16,560
So.

897
00:31:16,660 --> 00:31:16,720
Many.

898
00:31:16,880 --> 00:31:17,060
Frivolous.

899
00:31:17,140 --> 00:31:17,320
Windows.

900
00:31:17,520 --> 00:31:17,660
And.

901
00:31:17,660 --> 00:31:17,860
Extra.

902
00:31:18,040 --> 00:31:18,160
Things.

903
00:31:18,240 --> 00:31:18,300
That.

904
00:31:18,340 --> 00:31:18,400
Made.

905
00:31:18,700 --> 00:31:18,860
Difficult.

906
00:31:18,880 --> 00:31:19,040
To.

907
00:31:19,080 --> 00:31:19,240
Use.

908
00:31:19,300 --> 00:31:19,440
Apple.

909
00:31:19,520 --> 00:31:19,680
Script.

910
00:31:19,760 --> 00:31:19,860
To.

911
00:31:19,880 --> 00:31:20,040
Click.

912
00:31:20,060 --> 00:31:20,180
Through.

913
00:31:20,840 --> 00:31:21,000
So.

914
00:31:21,120 --> 00:31:21,180
We.

915
00:31:21,220 --> 00:31:21,340
Found.

916
00:31:21,480 --> 00:31:21,640
That.

917
00:31:21,640 --> 00:31:21,780
If.

918
00:31:21,840 --> 00:31:21,900
You.

919
00:31:21,940 --> 00:31:22,020
Use.

920
00:31:22,020 --> 00:31:22,160
MB.

921
00:31:22,400 --> 00:31:22,560
Debug.

922
00:31:22,580 --> 00:31:22,740
In.

923
00:31:23,060 --> 00:31:23,220
Conjunction.

924
00:31:23,480 --> 00:31:23,640
With.

925
00:31:23,820 --> 00:31:23,980
Resume.

926
00:31:23,980 --> 00:31:24,140
Buddy.

927
00:31:24,220 --> 00:31:24,380
Yes.

928
00:31:24,400 --> 00:31:24,520
It.

929
00:31:24,580 --> 00:31:24,620
Has.

930
00:31:24,620 --> 00:31:24,660
A.

931
00:31:25,220 --> 00:31:25,460
Lean.

932
00:31:25,940 --> 00:31:26,180
Migration.

933
00:31:26,420 --> 00:31:26,660
Process.

934
00:31:27,780 --> 00:31:28,020
That.

935
00:31:28,120 --> 00:31:28,200
We.

936
00:31:28,280 --> 00:31:28,320
Were.

937
00:31:28,380 --> 00:31:28,500
Able.

938
00:31:28,540 --> 00:31:28,640
To.

939
00:31:28,940 --> 00:31:29,180
Pretty.

940
00:31:29,300 --> 00:31:29,540
Trivially.

941
00:31:30,500 --> 00:31:30,740
Automate.

942
00:31:30,900 --> 00:31:31,140
With.

943
00:31:31,180 --> 00:31:31,360
Apple.

944
00:31:31,420 --> 00:31:31,600
Script.

945
00:31:31,740 --> 00:31:31,820
And.

946
00:31:31,900 --> 00:31:32,080
For.

947
00:31:32,160 --> 00:31:32,280
People.

948
00:31:32,360 --> 00:31:32,440
Who.

949
00:31:32,460 --> 00:31:32,600
Don't.

950
00:31:32,660 --> 00:31:32,840
Know.

951
00:31:33,240 --> 00:31:33,480
Apple.

952
00:31:33,820 --> 00:31:34,060
Scripts.

953
00:31:34,100 --> 00:31:34,340
Can.

954
00:31:35,380 --> 00:31:35,620
Click.

955
00:31:35,720 --> 00:31:35,860
Through.

956
00:31:36,000 --> 00:31:36,240
Various.

957
00:31:36,340 --> 00:31:36,580
Windows.

958
00:31:48,700 --> 00:31:48,940
As.

959
00:31:54,620 --> 00:31:54,700
One.

960
00:31:54,700 --> 00:31:54,760
Gigabyte.

961
00:31:54,860 --> 00:31:54,980
Time.

962
00:31:55,080 --> 00:31:55,180
Machine.

963
00:31:55,460 --> 00:31:55,640
Backup.

964
00:31:56,100 --> 00:31:56,280
Like.

965
00:31:56,500 --> 00:31:56,580
A.

966
00:31:57,320 --> 00:31:57,500
Partition.

967
00:31:57,640 --> 00:31:57,820
On.

968
00:31:57,900 --> 00:31:57,960
The.

969
00:31:58,000 --> 00:31:58,040
Hard.

970
00:31:58,160 --> 00:31:58,340
Drive.

971
00:31:59,480 --> 00:31:59,660
You.

972
00:31:59,760 --> 00:31:59,840
Might.

973
00:31:59,880 --> 00:31:59,940
Be.

974
00:32:00,000 --> 00:32:00,140
Thinking.

975
00:32:00,200 --> 00:32:00,360
One.

976
00:32:00,520 --> 00:32:00,700
Gigabyte.

977
00:32:00,800 --> 00:32:00,980
Doesn't.

978
00:32:01,040 --> 00:32:01,180
Sound.

979
00:32:01,220 --> 00:32:01,400
Small.

980
00:32:01,480 --> 00:32:01,600
But.

981
00:32:01,640 --> 00:32:01,820
Anyone.

982
00:32:01,880 --> 00:32:02,020
Who's.

983
00:32:02,100 --> 00:32:02,160
Done.

984
00:32:02,220 --> 00:32:02,380
Time.

985
00:32:02,440 --> 00:32:02,620
Machine.

986
00:32:06,120 --> 00:32:06,300
Can.

987
00:32:06,360 --> 00:32:06,540
Tell.

988
00:32:06,540 --> 00:32:06,620
There.

989
00:32:06,660 --> 00:32:06,740
It's.

990
00:32:06,760 --> 00:32:06,800
The.

991
00:32:06,960 --> 00:32:07,020
Same.

992
00:32:07,100 --> 00:32:07,300
Steps.

993
00:32:07,340 --> 00:32:07,380
We.

994
00:32:07,420 --> 00:32:07,600
Talked.

995
00:32:07,620 --> 00:32:07,760
About.

996
00:32:07,800 --> 00:32:07,960
Where.

997
00:32:08,260 --> 00:32:08,460
We're.

998
00:32:08,880 --> 00:32:09,080
Poisoning.

999
00:32:09,080 --> 00:32:09,260
The.

1000
00:32:09,580 --> 00:32:09,780
Environment.

1001
00:32:09,940 --> 00:32:10,140
Variable.

1002
00:32:10,220 --> 00:32:10,400
Setting.

1003
00:32:10,500 --> 00:32:10,600
The.

1004
00:32:10,780 --> 00:32:10,980
Payload.

1005
00:32:11,220 --> 00:32:11,420
And.

1006
00:32:11,660 --> 00:32:11,860
We.

1007
00:32:11,900 --> 00:32:12,060
Just.

1008
00:32:12,100 --> 00:32:12,200
Run.

1009
00:32:12,300 --> 00:32:12,500
Apple.

1010
00:32:12,580 --> 00:32:12,780
Script.

1011
00:32:12,940 --> 00:32:13,120
An.

1012
00:32:13,160 --> 00:32:13,300
Apple.

1013
00:32:13,340 --> 00:32:13,520
Script.

1014
00:32:13,660 --> 00:32:13,860
Will.

1015
00:32:13,960 --> 00:32:14,160
Then.

1016
00:32:14,340 --> 00:32:14,540
Run.

1017
00:32:15,500 --> 00:32:15,660
Setup.

1018
00:32:15,700 --> 00:32:15,860
Assistant.

1019
00:32:16,040 --> 00:32:16,180
With.

1020
00:32:16,240 --> 00:32:16,300
The.

1021
00:32:16,460 --> 00:32:16,620
Appropriate.

1022
00:32:16,920 --> 00:32:17,080
Parameters.

1023
00:32:19,480 --> 00:32:19,640
All.

1024
00:32:19,700 --> 00:32:19,760
Right.

1025
00:32:19,820 --> 00:32:19,860
So.

1026
00:32:19,960 --> 00:32:20,100
This.

1027
00:32:20,140 --> 00:32:20,200
Is.

1028
00:32:20,280 --> 00:32:20,440
The.

1029
00:32:20,440 --> 00:32:20,560
A.

1030
00:32:20,660 --> 00:32:20,820
Demo.

1031
00:32:20,860 --> 00:32:20,920
We.

1032
00:32:20,980 --> 00:32:21,000
Want.

1033
00:32:21,040 --> 00:32:21,100
To.

1034
00:32:21,160 --> 00:32:21,200
Show.

1035
00:32:21,240 --> 00:32:21,320
You.

1036
00:32:21,340 --> 00:32:21,460
Guys.

1037
00:32:21,500 --> 00:32:21,600
So.

1038
00:32:21,620 --> 00:32:21,740
This.

1039
00:32:21,780 --> 00:32:21,840
Is.

1040
00:32:21,940 --> 00:32:22,060
All.

1041
00:32:22,200 --> 00:32:22,360
Real.

1042
00:32:22,580 --> 00:32:22,740
Time.

1043
00:32:24,220 --> 00:32:24,380
I.

1044
00:32:24,520 --> 00:32:24,600
Just.

1045
00:32:24,660 --> 00:32:24,800
Showed.

1046
00:32:24,800 --> 00:32:24,860
Like.

1047
00:32:24,940 --> 00:32:25,000
The.

1048
00:32:25,120 --> 00:32:25,140
First.

1049
00:32:25,260 --> 00:32:25,400
Five.

1050
00:32:25,560 --> 00:32:25,720
Lines.

1051
00:32:25,780 --> 00:32:25,880
Of.

1052
00:32:25,900 --> 00:32:25,960
The.

1053
00:32:26,000 --> 00:32:26,160
Apple.

1054
00:32:26,400 --> 00:32:26,560
Text.

1055
00:32:26,720 --> 00:32:26,880
Exclude.

1056
00:32:26,960 --> 00:32:27,120
File.

1057
00:32:27,600 --> 00:32:27,760
And.

1058
00:32:28,000 --> 00:32:28,160
We're.

1059
00:32:28,240 --> 00:32:28,280
Going.

1060
00:32:28,320 --> 00:32:28,380
To.

1061
00:32:28,400 --> 00:32:28,440
Run.

1062
00:32:28,520 --> 00:32:28,660
It.

1063
00:32:28,680 --> 00:32:28,820
And.

1064
00:32:28,880 --> 00:32:28,940
Then.

1065
00:32:28,980 --> 00:32:29,040
At.

1066
00:32:29,060 --> 00:32:29,120
The.

1067
00:32:29,160 --> 00:32:29,180
End.

1068
00:32:29,220 --> 00:32:29,340
You'll.

1069
00:32:29,380 --> 00:32:29,460
See.

1070
00:32:29,540 --> 00:32:29,680
That.

1071
00:32:29,740 --> 00:32:29,900
The.

1072
00:32:30,020 --> 00:32:30,180
Apple.

1073
00:32:30,260 --> 00:32:30,400
Text.

1074
00:32:30,640 --> 00:32:30,800
Exclude.

1075
00:32:30,800 --> 00:32:31,000
P.

1076
00:32:31,080 --> 00:32:31,200
List.

1077
00:32:31,260 --> 00:32:31,380
File.

1078
00:32:31,460 --> 00:32:31,600
Which.

1079
00:32:31,640 --> 00:32:31,780
Is.

1080
00:32:32,400 --> 00:32:32,560
Protected.

1081
00:32:33,620 --> 00:32:33,780
Will.

1082
00:32:33,900 --> 00:32:33,960
Be.

1083
00:32:34,180 --> 00:32:34,340
Overwritten.

1084
00:32:34,360 --> 00:32:34,500
With.

1085
00:32:34,540 --> 00:32:34,600
The.

1086
00:32:34,620 --> 00:32:34,680
Word.

1087
00:32:34,860 --> 00:32:35,020
Migraine.

1088
00:32:38,080 --> 00:32:38,240
All.

1089
00:32:38,320 --> 00:32:38,380
Right.

1090
00:32:38,420 --> 00:32:38,520
So.

1091
00:32:38,540 --> 00:32:38,620
I'm.

1092
00:32:38,640 --> 00:32:38,700
Just.

1093
00:32:38,760 --> 00:32:38,900
Showing.

1094
00:32:38,940 --> 00:32:39,020
This.

1095
00:32:39,060 --> 00:32:39,140
Is.

1096
00:32:39,360 --> 00:32:39,520
Restricted.

1097
00:32:39,560 --> 00:32:39,680
Which.

1098
00:32:39,700 --> 00:32:39,840
Means.

1099
00:32:39,840 --> 00:32:39,940
Is.

1100
00:32:40,320 --> 00:32:40,480
Protected.

1101
00:32:41,300 --> 00:32:41,460
And.

1102
00:32:41,560 --> 00:32:41,640
We're.

1103
00:32:41,720 --> 00:32:41,840
Calling.

1104
00:32:41,840 --> 00:32:42,120
Osa.

1105
00:32:42,200 --> 00:32:42,320
Script.

1106
00:32:42,480 --> 00:32:42,560
Which.

1107
00:32:42,640 --> 00:32:42,700
Is.

1108
00:32:42,760 --> 00:32:42,860
Apple.

1109
00:32:43,180 --> 00:32:43,340
Scripts.

1110
00:32:43,560 --> 00:32:43,720
And.

1111
00:32:43,780 --> 00:32:43,900
From.

1112
00:32:43,980 --> 00:32:44,040
Here.

1113
00:32:44,100 --> 00:32:44,200
It's.

1114
00:32:44,220 --> 00:32:44,340
Calling.

1115
00:32:44,560 --> 00:32:44,720
Setup.

1116
00:32:44,800 --> 00:32:44,960
Assistant.

1117
00:32:46,400 --> 00:32:46,560
This.

1118
00:32:46,680 --> 00:32:46,740
Is.

1119
00:32:46,760 --> 00:32:46,820
The.

1120
00:32:47,100 --> 00:32:47,260
Machine.

1121
00:32:47,480 --> 00:32:47,640
Backup.

1122
00:32:47,700 --> 00:32:47,760
We.

1123
00:32:47,800 --> 00:32:47,960
Talked.

1124
00:32:48,000 --> 00:32:48,080
About.

1125
00:32:48,100 --> 00:32:48,180
The.

1126
00:32:48,220 --> 00:32:48,240
One.

1127
00:32:48,400 --> 00:32:48,560
Gigabyte.

1128
00:32:48,640 --> 00:32:48,740
Time.

1129
00:32:48,800 --> 00:32:48,940
Machine.

1130
00:32:49,100 --> 00:32:49,260
Backup.

1131
00:32:50,140 --> 00:32:50,300
And.

1132
00:32:50,300 --> 00:32:50,700
Yeah.

1133
00:32:51,060 --> 00:32:51,300
It's.

1134
00:32:51,320 --> 00:32:51,560
It's.

1135
00:32:51,640 --> 00:32:51,760
Going.

1136
00:32:51,920 --> 00:32:52,100
To.

1137
00:32:52,860 --> 00:32:53,100
Find.

1138
00:32:53,220 --> 00:32:53,300
The.

1139
00:32:53,360 --> 00:32:53,500
Right.

1140
00:32:53,820 --> 00:32:54,060
Window.

1141
00:32:54,220 --> 00:32:54,340
And.

1142
00:32:54,380 --> 00:32:54,500
Click.

1143
00:32:54,560 --> 00:32:54,680
Through.

1144
00:32:54,740 --> 00:32:54,980
Everything.

1145
00:32:55,680 --> 00:32:55,920
Automatically.

1146
00:32:57,700 --> 00:32:57,940
Kind.

1147
00:32:58,060 --> 00:32:58,120
Hard.

1148
00:32:58,160 --> 00:32:58,220
To.

1149
00:32:58,240 --> 00:32:58,380
Tell.

1150
00:32:58,380 --> 00:32:58,520
But.

1151
00:32:58,580 --> 00:32:58,800
It.

1152
00:32:58,980 --> 00:32:59,120
Basically.

1153
00:32:59,420 --> 00:32:59,660
Deselected.

1154
00:32:59,660 --> 00:32:59,840
Everything.

1155
00:32:59,880 --> 00:33:00,020
Except.

1156
00:33:00,120 --> 00:33:00,160
For.

1157
00:33:00,180 --> 00:33:00,240
The.

1158
00:33:00,280 --> 00:33:00,440
Dummy.

1159
00:33:00,480 --> 00:33:00,660
User.

1160
00:33:00,660 --> 00:33:00,800
I.

1161
00:33:01,020 --> 00:33:01,220
Created.

1162
00:33:01,520 --> 00:33:01,720
And.

1163
00:33:01,800 --> 00:33:01,900
From.

1164
00:33:01,980 --> 00:33:02,080
Here.

1165
00:33:02,120 --> 00:33:02,220
My.

1166
00:33:02,460 --> 00:33:02,660
Exploits.

1167
00:33:02,680 --> 00:33:02,820
Gonna.

1168
00:33:02,880 --> 00:33:03,020
Run.

1169
00:33:03,020 --> 00:33:03,180
And.

1170
00:33:03,280 --> 00:33:03,380
Then.

1171
00:33:03,400 --> 00:33:03,560
We.

1172
00:33:03,620 --> 00:33:03,820
Kill.

1173
00:33:03,900 --> 00:33:04,100
The.

1174
00:33:04,900 --> 00:33:05,100
Migration.

1175
00:33:05,180 --> 00:33:05,380
Daemon.

1176
00:33:05,600 --> 00:33:05,800
Before.

1177
00:33:05,860 --> 00:33:06,000
It.

1178
00:33:06,040 --> 00:33:06,100
Can.

1179
00:33:06,320 --> 00:33:06,520
Reboot.

1180
00:33:06,860 --> 00:33:07,060
And.

1181
00:33:07,120 --> 00:33:07,200
As.

1182
00:33:07,240 --> 00:33:07,300
You.

1183
00:33:07,420 --> 00:33:07,580
See.

1184
00:33:08,480 --> 00:33:08,680
Migraine.

1185
00:33:09,360 --> 00:33:09,560
Is.

1186
00:33:09,640 --> 00:33:09,800
Now.

1187
00:33:10,520 --> 00:33:10,720
Overwritten.

1188
00:33:10,720 --> 00:33:10,960
The.

1189
00:33:11,100 --> 00:33:11,360
Capital.

1190
00:33:11,400 --> 00:33:11,700
Apple.

1191
00:33:11,780 --> 00:33:11,940
Text.

1192
00:33:12,020 --> 00:33:12,320
Exclude.

1193
00:33:12,440 --> 00:33:12,700
And.

1194
00:33:12,720 --> 00:33:12,880
It.

1195
00:33:12,960 --> 00:33:13,140
Is.

1196
00:33:13,820 --> 00:33:14,140
Protected.

1197
00:33:23,180 --> 00:33:23,500
All.

1198
00:33:25,540 --> 00:33:25,860
Right.

1199
00:33:25,880 --> 00:33:26,040
So.

1200
00:33:26,140 --> 00:33:26,460
You.

1201
00:33:26,480 --> 00:33:26,800
Might.

1202
00:33:26,820 --> 00:33:27,060
Be.

1203
00:33:27,180 --> 00:33:27,500
Asking.

1204
00:33:27,660 --> 00:33:27,880
Well.

1205
00:33:27,920 --> 00:33:28,020
Who.

1206
00:33:28,060 --> 00:33:28,240
Cares.

1207
00:33:29,220 --> 00:33:29,540
Well.

1208
00:33:30,100 --> 00:33:30,420
Sip.

1209
00:33:30,560 --> 00:33:30,880
Is.

1210
00:33:31,140 --> 00:33:31,460
Like.

1211
00:33:31,540 --> 00:33:31,840
Most.

1212
00:33:32,000 --> 00:33:32,320
Security.

1213
00:33:32,460 --> 00:33:32,780
Mitigations.

1214
00:33:32,780 --> 00:33:32,960
It's.

1215
00:33:33,040 --> 00:33:33,120
A.

1216
00:33:33,140 --> 00:33:33,420
Double.

1217
00:33:33,580 --> 00:33:33,700
Edge.

1218
00:33:41,340 --> 00:33:41,500
It's.

1219
00:33:41,560 --> 00:33:41,640
Also.

1220
00:33:41,760 --> 00:33:41,920
Great.

1221
00:33:41,940 --> 00:33:42,060
For.

1222
00:33:42,580 --> 00:33:42,740
Preventing.

1223
00:33:44,280 --> 00:33:44,440
Current.

1224
00:33:44,540 --> 00:33:44,700
Access.

1225
00:33:44,860 --> 00:33:44,940
Or.

1226
00:33:45,000 --> 00:33:45,080
Root.

1227
00:33:45,180 --> 00:33:45,340
Kits.

1228
00:33:45,780 --> 00:33:45,940
But.

1229
00:33:46,020 --> 00:33:46,180
The.

1230
00:33:46,200 --> 00:33:46,360
Problem.

1231
00:33:46,400 --> 00:33:46,480
Is.

1232
00:33:46,500 --> 00:33:46,580
Once.

1233
00:33:46,640 --> 00:33:46,720
An.

1234
00:33:47,020 --> 00:33:47,180
Attacker.

1235
00:33:47,380 --> 00:33:47,540
Gets.

1236
00:33:47,680 --> 00:33:47,840
Past.

1237
00:33:47,880 --> 00:33:48,040
That.

1238
00:33:48,140 --> 00:33:48,300
Layer.

1239
00:33:48,880 --> 00:33:49,040
They.

1240
00:33:49,120 --> 00:33:49,200
Can.

1241
00:33:49,260 --> 00:33:49,320
Do.

1242
00:33:49,440 --> 00:33:49,600
Things.

1243
00:33:49,680 --> 00:33:49,780
That.

1244
00:33:49,840 --> 00:33:50,000
Are.

1245
00:34:04,820 --> 00:34:04,980
Extremely.

1246
00:34:05,280 --> 00:34:05,440
Difficult.

1247
00:34:05,440 --> 00:34:05,560
In.

1248
00:34:06,020 --> 00:34:06,180
Execution.

1249
00:34:06,320 --> 00:34:06,480
Like.

1250
00:34:06,520 --> 00:34:06,540
I.

1251
00:34:06,620 --> 00:34:06,680
Talked.

1252
00:34:06,780 --> 00:34:06,860
About.

1253
00:34:06,920 --> 00:34:07,080
Which.

1254
00:34:07,200 --> 00:34:07,360
Which.

1255
00:34:07,400 --> 00:34:07,460
Is.

1256
00:34:07,540 --> 00:34:07,700
Essentially.

1257
00:34:07,780 --> 00:34:07,860
Is.

1258
00:34:07,900 --> 00:34:07,920
Going.

1259
00:34:07,980 --> 00:34:08,020
To.

1260
00:34:08,020 --> 00:34:08,040
Be.

1261
00:34:08,240 --> 00:34:08,260
Root.

1262
00:34:08,300 --> 00:34:08,400
Kit.

1263
00:34:08,480 --> 00:34:08,540
In.

1264
00:34:08,560 --> 00:34:08,620
This.

1265
00:34:08,720 --> 00:34:08,880
Scenario.

1266
00:34:10,060 --> 00:34:10,220
And.

1267
00:34:10,340 --> 00:34:10,380
It.

1268
00:34:10,420 --> 00:34:10,440
Can.

1269
00:34:10,520 --> 00:34:10,600
Even.

1270
00:34:10,860 --> 00:34:11,020
Bypass.

1271
00:34:11,240 --> 00:34:11,400
Other.

1272
00:34:11,820 --> 00:34:11,980
Security.

1273
00:34:12,780 --> 00:34:12,940
Layers.

1274
00:34:13,620 --> 00:34:13,780
In.

1275
00:34:13,780 --> 00:34:13,880
Mac.

1276
00:34:14,040 --> 00:34:14,220
OS.

1277
00:34:14,360 --> 00:34:14,560
An.

1278
00:34:14,680 --> 00:34:14,920
Example.

1279
00:34:14,960 --> 00:34:15,200
Being.

1280
00:34:15,400 --> 00:34:15,640
Like.

1281
00:34:15,820 --> 00:34:16,060
TCC.

1282
00:34:16,240 --> 00:34:16,480
So.

1283
00:34:16,560 --> 00:34:16,660
That.

1284
00:34:16,740 --> 00:34:16,980
Means.

1285
00:34:17,240 --> 00:34:17,480
An.

1286
00:34:17,700 --> 00:34:17,940
Attacker.

1287
00:34:17,940 --> 00:34:18,080
Could.

1288
00:34:18,240 --> 00:34:18,480
Listen.

1289
00:34:18,560 --> 00:34:18,660
On.

1290
00:34:18,700 --> 00:34:18,760
Your.

1291
00:34:19,080 --> 00:34:19,320
Microphone.

1292
00:34:19,800 --> 00:34:20,040
Or.

1293
00:34:20,080 --> 00:34:20,320
Watch.

1294
00:34:20,320 --> 00:34:20,400
Your.

1295
00:34:20,440 --> 00:34:20,680
Camera.

1296
00:34:20,860 --> 00:34:21,100
And.

1297
00:34:21,160 --> 00:34:21,280
You.

1298
00:34:21,340 --> 00:34:21,480
Aren't.

1299
00:34:21,540 --> 00:34:21,780
Notified.

1300
00:34:21,900 --> 00:34:22,000
You.

1301
00:34:22,040 --> 00:34:22,100
Have.

1302
00:34:22,160 --> 00:34:22,220
No.

1303
00:34:22,240 --> 00:34:22,400
Idea.

1304
00:34:24,560 --> 00:34:24,740
All.

1305
00:34:24,940 --> 00:34:25,020
Right.

1306
00:34:25,040 --> 00:34:25,120
So.

1307
00:34:25,220 --> 00:34:25,260
I'm.

1308
00:34:25,300 --> 00:34:25,340
Gonna.

1309
00:34:25,540 --> 00:34:25,600
This.

1310
00:34:25,620 --> 00:34:25,740
Back.

1311
00:34:25,820 --> 00:34:25,940
Over.

1312
00:34:25,980 --> 00:34:26,060
To.

1313
00:34:26,200 --> 00:34:26,260
B.

1314
00:34:26,340 --> 00:34:26,400
O.

1315
00:34:26,420 --> 00:34:26,500
To.

1316
00:34:26,580 --> 00:34:26,700
Talk.

1317
00:34:26,720 --> 00:34:26,860
About.

1318
00:34:26,940 --> 00:34:27,120
Their.

1319
00:34:27,440 --> 00:34:27,620
Fix.

1320
00:34:27,840 --> 00:34:28,020
And.

1321
00:34:28,080 --> 00:34:28,200
Our.

1322
00:34:28,320 --> 00:34:28,500
Attempts.

1323
00:34:28,500 --> 00:34:28,600
To.

1324
00:34:28,640 --> 00:34:28,820
Forward.

1325
00:34:28,880 --> 00:34:29,000
It.

1326
00:34:32,040 --> 00:34:32,220
All.

1327
00:34:32,340 --> 00:34:32,480
Right.

1328
00:34:32,600 --> 00:34:32,780
Thanks.

1329
00:34:32,860 --> 00:34:33,040
Mike.

1330
00:34:34,440 --> 00:34:34,620
So.

1331
00:34:34,620 --> 00:34:34,860
We.

1332
00:34:36,060 --> 00:34:36,380
Disclosed.

1333
00:34:37,080 --> 00:34:37,400
That.

1334
00:34:37,500 --> 00:34:37,780
Bug.

1335
00:34:37,840 --> 00:34:38,040
To.

1336
00:34:38,100 --> 00:34:38,420
Apple.

1337
00:34:38,640 --> 00:34:38,960
Back.

1338
00:34:38,960 --> 00:34:39,160
In.

1339
00:34:39,180 --> 00:34:39,340
May.

1340
00:34:39,600 --> 00:34:39,920
2023.

1341
00:34:40,540 --> 00:34:40,860
And.

1342
00:34:41,580 --> 00:34:41,900
You.

1343
00:34:41,940 --> 00:34:42,020
Know.

1344
00:34:42,040 --> 00:34:42,200
There.

1345
00:34:42,280 --> 00:34:42,460
Was.

1346
00:34:42,480 --> 00:34:42,680
A.

1347
00:34:42,720 --> 00:34:43,040
Bit.

1348
00:34:43,080 --> 00:34:43,160
Of.

1349
00:34:43,200 --> 00:34:43,440
Like.

1350
00:34:43,480 --> 00:34:43,740
Back.

1351
00:34:43,740 --> 00:34:43,840
And.

1352
00:34:43,980 --> 00:34:44,300
Forth.

1353
00:34:44,300 --> 00:34:44,500
Because.

1354
00:34:44,620 --> 00:34:44,740
It's.

1355
00:34:44,820 --> 00:34:44,920
Not.

1356
00:34:44,980 --> 00:34:45,160
A.

1357
00:34:45,220 --> 00:34:45,500
Very.

1358
00:34:45,660 --> 00:34:45,980
Trivial.

1359
00:34:47,120 --> 00:34:47,440
Exploit.

1360
00:34:47,700 --> 00:34:47,900
But.

1361
00:34:48,420 --> 00:34:48,620
Eventually.

1362
00:34:48,840 --> 00:34:49,040
They.

1363
00:34:49,320 --> 00:34:49,520
They.

1364
00:34:49,560 --> 00:34:49,760
Kind.

1365
00:34:49,800 --> 00:34:49,860
Of.

1366
00:34:49,880 --> 00:34:50,000
Were.

1367
00:34:50,100 --> 00:34:50,220
Able.

1368
00:34:50,280 --> 00:34:50,400
To.

1369
00:34:50,660 --> 00:34:50,860
Reproduce.

1370
00:34:50,940 --> 00:34:51,140
It.

1371
00:34:51,260 --> 00:34:51,460
And.

1372
00:34:51,600 --> 00:34:51,800
They.

1373
00:34:53,340 --> 00:34:53,540
Fixed.

1374
00:34:53,540 --> 00:34:53,640
It.

1375
00:34:53,700 --> 00:34:53,780
In.

1376
00:34:53,820 --> 00:34:53,920
Their.

1377
00:34:53,960 --> 00:34:54,160
Beta.

1378
00:34:54,240 --> 00:34:54,360
And.

1379
00:34:54,440 --> 00:34:54,600
We.

1380
00:34:54,680 --> 00:34:54,780
Were.

1381
00:34:54,860 --> 00:34:55,060
Asked.

1382
00:34:55,160 --> 00:34:55,220
To.

1383
00:34:55,440 --> 00:34:55,640
Assess.

1384
00:34:55,680 --> 00:34:55,860
Their.

1385
00:34:56,120 --> 00:34:56,320
Fixed.

1386
00:34:56,620 --> 00:34:56,820
Their.

1387
00:34:56,880 --> 00:34:57,080
Beta.

1388
00:34:57,240 --> 00:34:57,440
Version.

1389
00:34:57,920 --> 00:34:58,120
So.

1390
00:34:58,240 --> 00:34:58,320
We.

1391
00:34:58,500 --> 00:34:58,640
Like.

1392
00:34:58,740 --> 00:34:58,840
Okay.

1393
00:34:59,100 --> 00:34:59,300
Let's.

1394
00:34:59,500 --> 00:34:59,700
Like.

1395
00:34:59,780 --> 00:34:59,980
Run.

1396
00:35:00,120 --> 00:35:00,240
The.

1397
00:35:00,320 --> 00:35:00,440
Beta.

1398
00:35:00,600 --> 00:35:00,800
Version.

1399
00:35:00,860 --> 00:35:01,000
And.

1400
00:35:01,040 --> 00:35:01,120
See.

1401
00:35:01,200 --> 00:35:01,340
What's.

1402
00:35:01,420 --> 00:35:01,500
Up.

1403
00:35:02,140 --> 00:35:02,340
And.

1404
00:35:02,500 --> 00:35:02,660
The.

1405
00:35:02,760 --> 00:35:02,840
First.

1406
00:35:02,940 --> 00:35:03,120
Thing.

1407
00:35:03,160 --> 00:35:03,280
That.

1408
00:35:03,340 --> 00:35:03,420
We.

1409
00:35:03,620 --> 00:35:03,820
Noticed.

1410
00:35:03,880 --> 00:35:04,060
Was.

1411
00:35:04,180 --> 00:35:04,380
Something.

1412
00:35:04,460 --> 00:35:04,620
That.

1413
00:35:04,660 --> 00:35:04,800
I.

1414
00:35:04,860 --> 00:35:04,960
Like.

1415
00:35:05,060 --> 00:35:05,140
To.

1416
00:35:26,280 --> 00:35:26,480
Call.

1417
00:35:26,480 --> 00:35:26,580
And.

1418
00:35:27,060 --> 00:35:27,340
Which.

1419
00:35:27,540 --> 00:35:27,800
Is.

1420
00:35:27,860 --> 00:35:28,020
The.

1421
00:35:28,100 --> 00:35:28,380
Proper.

1422
00:35:28,520 --> 00:35:28,680
Way.

1423
00:35:28,740 --> 00:35:28,880
Of.

1424
00:35:28,920 --> 00:35:29,080
Setting.

1425
00:35:29,180 --> 00:35:29,340
An.

1426
00:35:29,360 --> 00:35:29,600
Environment.

1427
00:35:29,680 --> 00:35:29,920
Variable.

1428
00:35:30,040 --> 00:35:30,300
In.

1429
00:35:30,320 --> 00:35:30,520
Lunch.

1430
00:35:30,580 --> 00:35:30,700
D.

1431
00:35:31,380 --> 00:35:31,660
And.

1432
00:35:32,580 --> 00:35:32,860
Basically.

1433
00:35:33,400 --> 00:35:33,680
Telling.

1434
00:35:33,740 --> 00:35:33,880
Me.

1435
00:35:33,880 --> 00:35:34,160
Like.

1436
00:35:34,180 --> 00:35:34,380
We.

1437
00:35:34,480 --> 00:35:34,760
Couldn't.

1438
00:35:34,760 --> 00:35:34,960
Set.

1439
00:35:35,000 --> 00:35:35,140
The.

1440
00:35:35,160 --> 00:35:35,360
Environment.

1441
00:35:35,420 --> 00:35:35,680
Variable.

1442
00:35:36,460 --> 00:35:36,740
Yeah.

1443
00:35:36,940 --> 00:35:37,220
Because.

1444
00:35:38,300 --> 00:35:38,580
And.

1445
00:35:38,640 --> 00:35:38,900
It's.

1446
00:35:38,900 --> 00:35:38,980
Not.

1447
00:35:39,180 --> 00:35:39,420
Permitted.

1448
00:35:39,460 --> 00:35:39,700
Because.

1449
00:35:39,880 --> 00:35:40,040
Of.

1450
00:35:40,120 --> 00:35:40,360
Sip.

1451
00:35:40,380 --> 00:35:40,560
So.

1452
00:35:40,660 --> 00:35:40,860
Now.

1453
00:35:41,280 --> 00:35:41,520
You.

1454
00:35:41,560 --> 00:35:41,640
Know.

1455
00:35:41,660 --> 00:35:41,900
With.

1456
00:35:41,960 --> 00:35:42,040
All.

1457
00:35:42,160 --> 00:35:42,220
The.

1458
00:35:42,340 --> 00:35:42,480
Things.

1459
00:35:42,520 --> 00:35:42,700
That.

1460
00:35:42,700 --> 00:35:42,940
Sip.

1461
00:35:43,540 --> 00:35:43,780
Enforces.

1462
00:35:43,880 --> 00:35:44,040
It.

1463
00:35:44,080 --> 00:35:44,300
Also.

1464
00:35:44,360 --> 00:35:44,560
Now.

1465
00:35:44,760 --> 00:35:45,000
Enforces.

1466
00:35:45,080 --> 00:35:45,320
The.

1467
00:35:45,420 --> 00:35:45,660
Fact.

1468
00:35:45,740 --> 00:35:45,880
That.

1469
00:35:45,900 --> 00:35:46,000
We.

1470
00:35:46,080 --> 00:35:46,280
Can't.

1471
00:35:46,360 --> 00:35:46,600
Really.

1472
00:35:47,360 --> 00:35:47,600
Touch.

1473
00:35:48,340 --> 00:35:48,580
Environment.

1474
00:35:48,800 --> 00:35:49,040
Variables.

1475
00:35:49,040 --> 00:35:49,280
Which.

1476
00:35:49,440 --> 00:35:49,620
Kind.

1477
00:35:49,720 --> 00:35:49,780
Of.

1478
00:35:49,840 --> 00:35:50,000
Like.

1479
00:35:50,060 --> 00:35:50,240
Socks.

1480
00:35:50,340 --> 00:35:50,460
And.

1481
00:35:50,480 --> 00:35:50,720
Rocks.

1482
00:35:50,740 --> 00:35:50,820
At.

1483
00:35:50,960 --> 00:35:51,040
Same.

1484
00:35:51,120 --> 00:35:51,360
Time.

1485
00:35:51,980 --> 00:35:52,260
Note.

1486
00:35:52,740 --> 00:35:53,020
That.

1487
00:35:53,600 --> 00:35:53,880
This.

1488
00:35:54,000 --> 00:35:54,160
Kind.

1489
00:35:54,200 --> 00:35:54,280
Of.

1490
00:35:54,380 --> 00:35:54,660
Enforcement.

1491
00:35:55,180 --> 00:35:55,460
Happens.

1492
00:35:55,460 --> 00:35:55,740
At.

1493
00:35:55,820 --> 00:35:56,040
Lunch.

1494
00:35:56,080 --> 00:35:56,200
D.

1495
00:35:56,280 --> 00:35:56,460
It.

1496
00:35:56,520 --> 00:35:56,620
Doesn't.

1497
00:35:56,740 --> 00:35:56,980
Happen.

1498
00:35:56,980 --> 00:35:57,200
It's.

1499
00:35:57,280 --> 00:35:57,540
At.

1500
00:35:58,040 --> 00:35:58,320
Lunch.

1501
00:35:58,560 --> 00:35:58,840
Ctl.

1502
00:35:58,860 --> 00:35:59,000
For.

1503
00:35:59,160 --> 00:35:59,320
Obvious.

1504
00:35:59,520 --> 00:35:59,680
Reasons.

1505
00:36:00,000 --> 00:36:00,160
Otherwise.

1506
00:36:00,520 --> 00:36:00,680
Anyone.

1507
00:36:00,820 --> 00:36:00,960
Would.

1508
00:36:01,040 --> 00:36:01,080
Be.

1509
00:36:01,140 --> 00:36:01,220
Able.

1510
00:36:01,280 --> 00:36:01,360
To.

1511
00:36:01,540 --> 00:36:01,700
Bypass.

1512
00:36:01,860 --> 00:36:02,020
It.

1513
00:36:03,020 --> 00:36:03,180
So.

1514
00:36:03,340 --> 00:36:03,500
That's.

1515
00:36:03,800 --> 00:36:03,960
Fixed.

1516
00:36:04,000 --> 00:36:04,160
Number.

1517
00:36:04,240 --> 00:36:04,400
One.

1518
00:36:04,480 --> 00:36:04,580
And.

1519
00:36:04,620 --> 00:36:04,760
Then.

1520
00:36:04,800 --> 00:36:04,880
We.

1521
00:36:04,920 --> 00:36:04,980
Were.

1522
00:36:05,020 --> 00:36:05,180
Like.

1523
00:36:05,660 --> 00:36:05,820
Okay.

1524
00:36:05,880 --> 00:36:06,040
We.

1525
00:36:06,100 --> 00:36:06,220
Don't.

1526
00:36:06,420 --> 00:36:06,580
Really.

1527
00:36:06,720 --> 00:36:06,880
Need.

1528
00:36:06,900 --> 00:36:07,040
To.

1529
00:36:07,200 --> 00:36:07,360
Affect.

1530
00:36:07,600 --> 00:36:07,760
All.

1531
00:36:07,840 --> 00:36:07,940
Of.

1532
00:36:07,940 --> 00:36:08,020
The.

1533
00:36:08,100 --> 00:36:08,300
Environment.

1534
00:36:08,440 --> 00:36:08,640
Variables.

1535
00:36:08,700 --> 00:36:08,860
In.

1536
00:36:08,900 --> 00:36:08,960
The.

1537
00:36:09,000 --> 00:36:09,200
System.

1538
00:36:09,320 --> 00:36:09,380
We.

1539
00:36:09,500 --> 00:36:09,700
Just.

1540
00:36:09,700 --> 00:36:09,860
Need.

1541
00:36:09,940 --> 00:36:10,080
To.

1542
00:36:10,340 --> 00:36:10,540
Affect.

1543
00:36:11,000 --> 00:36:11,200
A.

1544
00:36:11,520 --> 00:36:11,720
System.

1545
00:36:12,100 --> 00:36:12,300
Migration.

1546
00:36:12,340 --> 00:36:12,520
D.

1547
00:36:12,540 --> 00:36:12,720
Which.

1548
00:36:12,820 --> 00:36:12,920
Is.

1549
00:36:12,980 --> 00:36:13,100
Like.

1550
00:36:13,180 --> 00:36:13,340
One.

1551
00:36:13,580 --> 00:36:13,780
Process.

1552
00:36:14,020 --> 00:36:14,220
In.

1553
00:36:14,260 --> 00:36:14,400
The.

1554
00:36:14,480 --> 00:36:14,680
In.

1555
00:36:14,720 --> 00:36:14,800
The.

1556
00:36:14,840 --> 00:36:15,040
System.

1557
00:36:15,520 --> 00:36:15,720
Yes.

1558
00:36:15,880 --> 00:36:16,080
It.

1559
00:36:16,180 --> 00:36:16,240
Is.

1560
00:36:16,280 --> 00:36:16,380
A.

1561
00:36:16,380 --> 00:36:16,720
Demons.

1562
00:36:16,720 --> 00:36:16,940
So.

1563
00:36:16,960 --> 00:36:17,100
It's.

1564
00:36:17,180 --> 00:36:17,340
A.

1565
00:36:17,380 --> 00:36:17,660
It's.

1566
00:36:17,700 --> 00:36:17,740
A.

1567
00:36:17,980 --> 00:36:18,240
Process.

1568
00:36:18,380 --> 00:36:18,600
Of.

1569
00:36:18,720 --> 00:36:19,000
Launch.

1570
00:36:19,120 --> 00:36:19,220
D.

1571
00:36:19,680 --> 00:36:19,960
That's.

1572
00:36:19,960 --> 00:36:20,120
Why.

1573
00:36:20,240 --> 00:36:20,520
Setting.

1574
00:36:20,700 --> 00:36:20,900
The.

1575
00:36:20,940 --> 00:36:21,120
Environment.

1576
00:36:21,260 --> 00:36:21,480
Variables.

1577
00:36:21,540 --> 00:36:21,740
To.

1578
00:36:21,780 --> 00:36:21,980
Launch.

1579
00:36:22,060 --> 00:36:22,220
D.

1580
00:36:22,580 --> 00:36:22,860
Works.

1581
00:36:23,080 --> 00:36:23,280
To.

1582
00:36:23,300 --> 00:36:23,440
Begin.

1583
00:36:23,540 --> 00:36:23,740
With.

1584
00:36:24,120 --> 00:36:24,400
But.

1585
00:36:24,460 --> 00:36:24,600
Then.

1586
00:36:24,600 --> 00:36:24,720
Can.

1587
00:36:24,840 --> 00:36:24,900
We.

1588
00:36:24,920 --> 00:36:24,960
Do.

1589
00:36:24,960 --> 00:36:25,160
Something.

1590
00:36:25,300 --> 00:36:25,580
Else.

1591
00:36:26,260 --> 00:36:26,540
And.

1592
00:36:26,820 --> 00:36:27,100
Launch.

1593
00:36:27,320 --> 00:36:27,600
Demons.

1594
00:36:27,680 --> 00:36:27,960
In.

1595
00:36:28,020 --> 00:36:28,300
Mac.

1596
00:36:28,360 --> 00:36:28,500
O.

1597
00:36:28,520 --> 00:36:28,660
S.

1598
00:36:28,700 --> 00:36:28,820
Are.

1599
00:36:28,980 --> 00:36:29,260
Described.

1600
00:36:29,320 --> 00:36:29,460
As.

1601
00:36:29,520 --> 00:36:29,600
You.

1602
00:36:29,620 --> 00:36:29,720
Could.

1603
00:36:29,780 --> 00:36:29,940
See.

1604
00:36:30,080 --> 00:36:30,360
Earlier.

1605
00:36:30,620 --> 00:36:30,900
By.

1606
00:36:30,920 --> 00:36:31,060
A.

1607
00:36:31,160 --> 00:36:31,280
P.

1608
00:36:31,280 --> 00:36:31,420
List.

1609
00:36:31,540 --> 00:36:31,780
File.

1610
00:36:32,340 --> 00:36:32,620
That's.

1611
00:36:32,700 --> 00:36:32,840
The.

1612
00:36:32,920 --> 00:36:33,200
Thing.

1613
00:36:33,340 --> 00:36:33,480
That.

1614
00:36:33,520 --> 00:36:33,740
Mike.

1615
00:36:33,860 --> 00:36:34,140
Showed.

1616
00:36:34,140 --> 00:36:34,360
With.

1617
00:36:34,360 --> 00:36:34,580
All.

1618
00:36:34,640 --> 00:36:34,780
The.

1619
00:36:55,880 --> 00:36:56,160
Demons.

1620
00:36:57,140 --> 00:36:57,420
And.

1621
00:36:57,800 --> 00:36:58,080
You.

1622
00:36:58,300 --> 00:36:58,440
We.

1623
00:36:58,600 --> 00:36:58,640
Don't.

1624
00:36:58,720 --> 00:36:58,780
Have.

1625
00:36:58,880 --> 00:36:58,960
To.

1626
00:36:59,080 --> 00:36:59,120
Put.

1627
00:36:59,180 --> 00:36:59,280
It.

1628
00:36:59,300 --> 00:36:59,440
In.

1629
00:36:59,460 --> 00:36:59,660
A.

1630
00:37:00,480 --> 00:37:00,760
C.

1631
00:37:01,280 --> 00:37:01,560
Protected.

1632
00:37:01,720 --> 00:37:02,000
Directory.

1633
00:37:02,740 --> 00:37:03,020
And.

1634
00:37:03,120 --> 00:37:03,400
Basically.

1635
00:37:03,440 --> 00:37:03,720
Run.

1636
00:37:03,840 --> 00:37:03,960
The.

1637
00:37:04,000 --> 00:37:04,260
Thing.

1638
00:37:04,760 --> 00:37:05,040
And.

1639
00:37:05,240 --> 00:37:05,380
It.

1640
00:37:05,500 --> 00:37:05,780
Supports.

1641
00:37:05,780 --> 00:37:05,900
And.

1642
00:37:06,140 --> 00:37:06,420
Variables.

1643
00:37:06,580 --> 00:37:06,860
So.

1644
00:37:06,920 --> 00:37:07,060
That's.

1645
00:37:07,120 --> 00:37:07,240
Good.

1646
00:37:07,780 --> 00:37:08,060
And.

1647
00:37:08,480 --> 00:37:08,720
I.

1648
00:37:09,360 --> 00:37:09,380
To.

1649
00:37:09,600 --> 00:37:09,720
Too.

1650
00:37:09,800 --> 00:37:09,920
Much.

1651
00:37:09,980 --> 00:37:10,100
About.

1652
00:37:10,180 --> 00:37:10,380
It.

1653
00:37:10,400 --> 00:37:10,560
But.

1654
00:37:10,760 --> 00:37:11,000
Basically.

1655
00:37:11,120 --> 00:37:11,320
There.

1656
00:37:11,400 --> 00:37:11,480
Is.

1657
00:37:11,520 --> 00:37:11,580
A.

1658
00:37:11,620 --> 00:37:11,860
Technology.

1659
00:37:12,020 --> 00:37:12,240
Called.

1660
00:37:12,380 --> 00:37:12,620
Launch.

1661
00:37:12,980 --> 00:37:13,220
Constraints.

1662
00:37:13,320 --> 00:37:13,560
Which.

1663
00:37:13,680 --> 00:37:13,920
Makes.

1664
00:37:14,000 --> 00:37:14,200
Sure.

1665
00:37:14,260 --> 00:37:14,480
That.

1666
00:37:14,940 --> 00:37:15,180
Things.

1667
00:37:15,560 --> 00:37:15,800
Run.

1668
00:37:16,720 --> 00:37:16,960
Things.

1669
00:37:17,100 --> 00:37:17,280
That.

1670
00:37:17,440 --> 00:37:17,680
Are.

1671
00:37:17,820 --> 00:37:18,060
Supposed.

1672
00:37:18,080 --> 00:37:18,180
To.

1673
00:37:18,180 --> 00:37:18,280
Run.

1674
00:37:18,400 --> 00:37:18,520
By.

1675
00:37:18,580 --> 00:37:18,800
Apple.

1676
00:37:18,940 --> 00:37:19,080
Or.

1677
00:37:19,140 --> 00:37:19,380
Only.

1678
00:37:19,380 --> 00:37:19,600
Run.

1679
00:37:19,680 --> 00:37:19,840
By.

1680
00:37:19,900 --> 00:37:20,140
Apple.

1681
00:37:20,500 --> 00:37:20,740
In.

1682
00:37:20,820 --> 00:37:20,920
This.

1683
00:37:20,980 --> 00:37:21,180
Case.

1684
00:37:21,220 --> 00:37:21,400
Why.

1685
00:37:21,440 --> 00:37:21,560
It.

1686
00:37:21,740 --> 00:37:21,980
Enforces.

1687
00:37:22,020 --> 00:37:22,240
Is.

1688
00:37:22,280 --> 00:37:22,420
That.

1689
00:37:22,440 --> 00:37:22,600
The.

1690
00:37:22,640 --> 00:37:22,800
Mac.

1691
00:37:23,000 --> 00:37:23,240
Services.

1692
00:37:23,400 --> 00:37:23,600
That.

1693
00:37:23,640 --> 00:37:23,740
You.

1694
00:37:23,780 --> 00:37:23,920
Guys.

1695
00:37:24,020 --> 00:37:24,260
Saw.

1696
00:37:24,680 --> 00:37:24,920
Those.

1697
00:37:25,040 --> 00:37:25,200
Six.

1698
00:37:25,280 --> 00:37:25,420
Mac.

1699
00:37:25,580 --> 00:37:25,820
Services.

1700
00:37:25,940 --> 00:37:26,180
Are.

1701
00:37:26,220 --> 00:37:26,440
Actually.

1702
00:37:26,440 --> 00:37:26,900
Owned.

1703
00:37:27,400 --> 00:37:27,680
By.

1704
00:37:29,520 --> 00:37:29,800
By.

1705
00:37:29,800 --> 00:37:29,940
A.

1706
00:37:29,980 --> 00:37:30,160
File.

1707
00:37:30,280 --> 00:37:30,380
That.

1708
00:37:30,480 --> 00:37:30,740
Was.

1709
00:37:31,120 --> 00:37:31,400
Launched.

1710
00:37:31,440 --> 00:37:31,580
From.

1711
00:37:31,640 --> 00:37:31,800
The.

1712
00:37:31,920 --> 00:37:32,200
SIP.

1713
00:37:32,440 --> 00:37:32,720
Bypass.

1714
00:37:33,060 --> 00:37:33,340
The.

1715
00:37:33,420 --> 00:37:33,660
SIP.

1716
00:37:34,420 --> 00:37:34,700
Protected.

1717
00:37:34,700 --> 00:37:34,960
Directory.

1718
00:37:35,480 --> 00:37:35,760
So.

1719
00:37:35,800 --> 00:37:36,060
Launch.

1720
00:37:36,660 --> 00:37:36,940
Constraints.

1721
00:37:37,000 --> 00:37:37,220
Make.

1722
00:37:37,280 --> 00:37:37,420
Sure.

1723
00:37:37,440 --> 00:37:37,560
That.

1724
00:37:37,580 --> 00:37:37,720
We.

1725
00:37:37,740 --> 00:37:37,980
Can't.

1726
00:37:38,060 --> 00:37:38,340
Hijack.

1727
00:37:38,380 --> 00:37:38,560
Any.

1728
00:37:39,020 --> 00:37:39,300
System.

1729
00:37:39,460 --> 00:37:39,740
Launch.

1730
00:37:39,920 --> 00:37:40,200
Demons.

1731
00:37:40,960 --> 00:37:41,240
Definitions.

1732
00:37:56,440 --> 00:37:56,640
Original.

1733
00:37:56,720 --> 00:37:56,860
System.

1734
00:37:57,060 --> 00:37:57,260
Aggression.

1735
00:37:57,400 --> 00:37:57,540
D.

1736
00:37:57,580 --> 00:37:57,700
The.

1737
00:37:57,780 --> 00:37:57,920
Only.

1738
00:37:58,080 --> 00:37:58,280
Difference.

1739
00:37:58,400 --> 00:37:58,520
Is.

1740
00:37:58,540 --> 00:37:58,740
That.

1741
00:37:59,620 --> 00:37:59,820
I.

1742
00:37:59,960 --> 00:38:00,020
Had.

1743
00:38:00,100 --> 00:38:00,180
To.

1744
00:38:00,200 --> 00:38:00,340
Name.

1745
00:38:00,400 --> 00:38:00,580
It.

1746
00:38:00,600 --> 00:38:00,700
A.

1747
00:38:00,720 --> 00:38:00,800
Bit.

1748
00:38:00,940 --> 00:38:01,140
Different.

1749
00:38:01,300 --> 00:38:01,500
So.

1750
00:38:01,600 --> 00:38:01,800
Now.

1751
00:38:01,880 --> 00:38:02,020
It's.

1752
00:38:02,100 --> 00:38:02,300
Named.

1753
00:38:02,500 --> 00:38:02,700
Com.

1754
00:38:02,820 --> 00:38:03,000
Dot.

1755
00:38:03,020 --> 00:38:03,100
J.

1756
00:38:03,180 --> 00:38:03,280
B.

1757
00:38:03,380 --> 00:38:03,540
O.

1758
00:38:03,580 --> 00:38:03,760
Dot.

1759
00:38:03,880 --> 00:38:04,080
Apple.

1760
00:38:04,200 --> 00:38:04,340
And.

1761
00:38:04,340 --> 00:38:04,620
Doesn't.

1762
00:38:04,680 --> 00:38:04,920
Really.

1763
00:38:05,380 --> 00:38:05,640
Shouldn't.

1764
00:38:05,640 --> 00:38:05,840
Really.

1765
00:38:05,880 --> 00:38:06,080
Affect.

1766
00:38:06,220 --> 00:38:06,480
Anything.

1767
00:38:06,880 --> 00:38:07,140
And.

1768
00:38:07,200 --> 00:38:07,300
The.

1769
00:38:07,320 --> 00:38:07,440
Other.

1770
00:38:07,600 --> 00:38:07,860
Part.

1771
00:38:07,880 --> 00:38:08,120
Is.

1772
00:38:08,160 --> 00:38:08,420
Is.

1773
00:38:08,460 --> 00:38:08,680
This.

1774
00:38:08,700 --> 00:38:08,900
Part.

1775
00:38:08,940 --> 00:38:09,200
Where.

1776
00:38:09,240 --> 00:38:09,320
I.

1777
00:38:09,420 --> 00:38:09,680
Basically.

1778
00:38:10,340 --> 00:38:10,600
Try.

1779
00:38:10,780 --> 00:38:10,860
To.

1780
00:38:10,900 --> 00:38:11,040
Set.

1781
00:38:11,080 --> 00:38:11,220
The.

1782
00:38:11,240 --> 00:38:11,420
Invite.

1783
00:38:11,680 --> 00:38:11,940
Variables.

1784
00:38:12,580 --> 00:38:12,840
Specifically.

1785
00:38:13,120 --> 00:38:13,300
Part.

1786
00:38:13,320 --> 00:38:13,420
Of.

1787
00:38:13,500 --> 00:38:13,640
Five.

1788
00:38:13,660 --> 00:38:13,920
Opt.

1789
00:38:14,380 --> 00:38:14,640
Now.

1790
00:38:15,080 --> 00:38:15,400
Again.

1791
00:38:15,780 --> 00:38:15,920
This.

1792
00:38:16,020 --> 00:38:16,240
Works.

1793
00:38:16,300 --> 00:38:16,540
But.

1794
00:38:16,840 --> 00:38:17,160
Doesn't.

1795
00:38:17,180 --> 00:38:17,320
Work.

1796
00:38:17,440 --> 00:38:17,680
Really.

1797
00:38:17,740 --> 00:38:17,960
Because.

1798
00:38:18,060 --> 00:38:18,220
The.

1799
00:38:18,240 --> 00:38:18,460
Really.

1800
00:38:18,860 --> 00:38:19,180
The.

1801
00:38:19,340 --> 00:38:19,660
System.

1802
00:38:19,780 --> 00:38:20,020
Aggression.

1803
00:38:20,160 --> 00:38:20,340
D.

1804
00:38:20,400 --> 00:38:20,720
Basically.

1805
00:38:20,840 --> 00:38:21,160
Gets.

1806
00:38:21,220 --> 00:38:21,480
Killed.

1807
00:38:21,540 --> 00:38:21,820
By.

1808
00:38:21,960 --> 00:38:22,280
The.

1809
00:38:22,440 --> 00:38:22,600
O.

1810
00:38:22,680 --> 00:38:22,920
S.

1811
00:38:22,920 --> 00:38:23,120
Because.

1812
00:38:23,300 --> 00:38:23,400
Of.

1813
00:38:23,420 --> 00:38:23,540
That.

1814
00:38:23,580 --> 00:38:23,860
Thing.

1815
00:38:24,220 --> 00:38:24,540
So.

1816
00:38:25,420 --> 00:38:25,740
No.

1817
00:38:25,920 --> 00:38:26,200
No.

1818
00:38:26,300 --> 00:38:26,620
Dice.

1819
00:38:27,440 --> 00:38:27,680
And.

1820
00:38:27,840 --> 00:38:28,080
Then.

1821
00:38:28,580 --> 00:38:28,820
The.

1822
00:38:29,100 --> 00:38:29,340
Third.

1823
00:38:29,520 --> 00:38:29,760
Fix.

1824
00:38:30,060 --> 00:38:30,300
Which.

1825
00:38:30,700 --> 00:38:30,940
Or.

1826
00:38:30,980 --> 00:38:31,080
The.

1827
00:38:31,160 --> 00:38:31,320
Third.

1828
00:38:31,440 --> 00:38:31,680
Attempt.

1829
00:38:31,720 --> 00:38:31,860
That.

1830
00:38:31,900 --> 00:38:32,020
We.

1831
00:38:32,080 --> 00:38:32,200
Had.

1832
00:38:32,320 --> 00:38:32,560
Really.

1833
00:38:33,060 --> 00:38:33,300
Is.

1834
00:38:33,400 --> 00:38:33,600
That.

1835
00:38:34,140 --> 00:38:34,380
We.

1836
00:38:34,480 --> 00:38:34,500
Were.

1837
00:38:34,580 --> 00:38:34,740
Like.

1838
00:38:34,760 --> 00:38:34,980
Okay.

1839
00:38:35,040 --> 00:38:35,240
Can.

1840
00:38:35,320 --> 00:38:35,420
We.

1841
00:38:35,440 --> 00:38:35,480
Do.

1842
00:38:35,580 --> 00:38:35,820
Something.

1843
00:38:35,900 --> 00:38:36,120
That.

1844
00:38:36,480 --> 00:38:36,720
Doesn't.

1845
00:38:36,760 --> 00:38:36,880
Have.

1846
00:38:36,960 --> 00:38:37,160
Invite.

1847
00:38:37,320 --> 00:38:37,560
Variables.

1848
00:38:37,940 --> 00:38:38,180
Because.

1849
00:38:38,420 --> 00:38:38,660
We.

1850
00:38:38,860 --> 00:38:39,100
Noticed.

1851
00:38:39,280 --> 00:38:39,520
Again.

1852
00:38:39,620 --> 00:38:39,860
Those.

1853
00:38:39,920 --> 00:38:40,040
Are.

1854
00:38:40,180 --> 00:38:40,420
Perl.

1855
00:38:40,760 --> 00:38:41,000
Scripts.

1856
00:38:41,000 --> 00:38:41,180
And.

1857
00:38:41,220 --> 00:38:41,440
Perl.

1858
00:38:41,740 --> 00:38:41,980
Scripts.

1859
00:38:42,240 --> 00:38:42,480
Sometimes.

1860
00:38:42,660 --> 00:38:42,860
Have.

1861
00:38:43,240 --> 00:38:43,480
Dependencies.

1862
00:38:43,960 --> 00:38:44,200
Can.

1863
00:38:44,260 --> 00:38:44,320
We.

1864
00:38:44,380 --> 00:38:44,580
Find.

1865
00:38:44,620 --> 00:38:44,720
A.

1866
00:38:44,780 --> 00:38:44,900
Strong.

1867
00:38:45,240 --> 00:38:45,480
Dependency.

1868
00:38:45,540 --> 00:38:45,680
In.

1869
00:38:45,700 --> 00:38:45,780
The.

1870
00:38:45,800 --> 00:38:45,940
Perl.

1871
00:38:46,200 --> 00:38:46,440
Scripts.

1872
00:38:46,840 --> 00:38:47,080
And.

1873
00:38:47,200 --> 00:38:47,380
As.

1874
00:38:47,440 --> 00:38:47,500
You.

1875
00:38:47,540 --> 00:38:47,600
Can.

1876
00:38:47,640 --> 00:38:47,820
See.

1877
00:38:47,820 --> 00:38:47,940
In.

1878
00:38:47,940 --> 00:38:48,060
The.

1879
00:38:48,500 --> 00:38:48,700
Part.

1880
00:38:49,300 --> 00:38:49,500
Whoops.

1881
00:38:49,920 --> 00:38:50,120
As.

1882
00:38:50,220 --> 00:38:50,260
You.

1883
00:38:50,300 --> 00:38:50,320
Can.

1884
00:38:50,400 --> 00:38:50,520
See.

1885
00:38:50,540 --> 00:38:50,620
In.

1886
00:38:50,640 --> 00:38:50,720
The.

1887
00:38:50,740 --> 00:38:50,840
Right.

1888
00:38:50,980 --> 00:38:51,180
Part.

1889
00:38:51,200 --> 00:38:51,380
You.

1890
00:38:51,460 --> 00:38:51,540
Have.

1891
00:38:51,620 --> 00:38:51,820
Used.

1892
00:38:51,980 --> 00:38:52,180
Strict.

1893
00:38:52,260 --> 00:38:52,340
And.

1894
00:38:52,400 --> 00:38:52,500
Then.

1895
00:38:52,540 --> 00:38:52,740
Use.

1896
00:38:53,080 --> 00:38:53,280
File.

1897
00:38:53,800 --> 00:38:54,000
Base.

1898
00:38:54,200 --> 00:38:54,360
Name.

1899
00:38:54,780 --> 00:38:54,980
Those.

1900
00:38:55,120 --> 00:38:55,220
Are.

1901
00:38:55,380 --> 00:38:55,580
Basically.

1902
00:38:56,040 --> 00:38:56,240
Imports.

1903
00:38:56,260 --> 00:38:56,460
Just.

1904
00:38:56,560 --> 00:38:56,760
Like.

1905
00:38:56,760 --> 00:38:57,160
Imports.

1906
00:38:57,160 --> 00:38:57,320
In.

1907
00:38:58,140 --> 00:38:58,400
I.

1908
00:38:58,500 --> 00:38:58,540
Don't.

1909
00:38:58,580 --> 00:38:58,640
Know.

1910
00:38:58,700 --> 00:38:58,740
In.

1911
00:38:58,780 --> 00:38:59,040
Python.

1912
00:38:59,160 --> 00:38:59,300
Or.

1913
00:38:59,320 --> 00:38:59,540
Whatever.

1914
00:39:00,160 --> 00:39:00,420
And.

1915
00:39:01,420 --> 00:39:01,680
The.

1916
00:39:01,860 --> 00:39:02,120
File.

1917
00:39:02,240 --> 00:39:02,480
Base.

1918
00:39:02,520 --> 00:39:02,680
Name.

1919
00:39:02,740 --> 00:39:02,940
File.

1920
00:39:02,980 --> 00:39:03,200
Is.

1921
00:39:03,740 --> 00:39:04,000
Really.

1922
00:39:04,540 --> 00:39:04,800
Translated.

1923
00:39:04,840 --> 00:39:05,020
To.

1924
00:39:05,020 --> 00:39:05,160
A.

1925
00:39:05,160 --> 00:39:05,420
Directory.

1926
00:39:05,500 --> 00:39:05,660
In.

1927
00:39:05,660 --> 00:39:05,700
The.

1928
00:39:05,780 --> 00:39:05,840
File.

1929
00:39:05,880 --> 00:39:06,120
System.

1930
00:39:06,180 --> 00:39:06,260
And.

1931
00:39:06,300 --> 00:39:06,440
Base.

1932
00:39:06,520 --> 00:39:06,660
Name.

1933
00:39:06,700 --> 00:39:06,840
Is.

1934
00:39:06,840 --> 00:39:06,940
Going.

1935
00:39:07,100 --> 00:39:07,200
To.

1936
00:39:07,240 --> 00:39:07,300
Be.

1937
00:39:07,500 --> 00:39:07,740
Looked.

1938
00:39:08,320 --> 00:39:08,560
After.

1939
00:39:08,700 --> 00:39:08,920
Base.

1940
00:39:09,020 --> 00:39:09,140
Name.

1941
00:39:09,200 --> 00:39:09,360
Dot.

1942
00:39:09,380 --> 00:39:09,540
P.

1943
00:39:09,540 --> 00:39:09,680
M.

1944
00:39:09,880 --> 00:39:10,120
Specifically.

1945
00:39:10,620 --> 00:39:10,860
Which.

1946
00:39:10,900 --> 00:39:11,000
Is.

1947
00:39:11,060 --> 00:39:11,160
The.

1948
00:39:11,180 --> 00:39:11,360
Pearl.

1949
00:39:11,540 --> 00:39:11,780
Module.

1950
00:39:12,420 --> 00:39:12,660
And.

1951
00:39:12,700 --> 00:39:12,920
Pearl.

1952
00:39:13,020 --> 00:39:13,220
Has.

1953
00:39:13,620 --> 00:39:13,860
Dependencies.

1954
00:39:14,080 --> 00:39:14,320
And.

1955
00:39:14,360 --> 00:39:14,460
The.

1956
00:39:14,660 --> 00:39:14,900
Lookup.

1957
00:39:15,120 --> 00:39:15,360
Order.

1958
00:39:16,040 --> 00:39:16,280
And.

1959
00:39:16,400 --> 00:39:16,540
The.

1960
00:39:16,660 --> 00:39:16,780
Lookup.

1961
00:39:16,820 --> 00:39:17,020
Order.

1962
00:39:17,100 --> 00:39:17,280
You.

1963
00:39:17,280 --> 00:39:17,340
Can.

1964
00:39:17,420 --> 00:39:17,660
Print.

1965
00:39:17,760 --> 00:39:17,880
It.

1966
00:39:17,940 --> 00:39:18,120
With.

1967
00:39:18,680 --> 00:39:18,940
The.

1968
00:39:19,600 --> 00:39:19,860
At.

1969
00:39:19,960 --> 00:39:20,140
I.

1970
00:39:20,200 --> 00:39:20,300
N.

1971
00:39:20,320 --> 00:39:20,540
C.

1972
00:39:21,880 --> 00:39:22,140
Pearl.

1973
00:39:22,460 --> 00:39:22,720
Variable.

1974
00:39:22,800 --> 00:39:22,920
As.

1975
00:39:22,960 --> 00:39:23,040
You.

1976
00:39:23,100 --> 00:39:23,160
Can.

1977
00:39:23,180 --> 00:39:23,360
See.

1978
00:39:23,380 --> 00:39:23,640
Here.

1979
00:39:24,160 --> 00:39:24,420
And.

1980
00:39:24,660 --> 00:39:24,920
These.

1981
00:39:24,980 --> 00:39:25,120
Are.

1982
00:39:25,140 --> 00:39:25,400
This.

1983
00:39:25,480 --> 00:39:25,580
Is.

1984
00:39:25,600 --> 00:39:25,740
The.

1985
00:39:25,740 --> 00:39:26,000
Search.

1986
00:39:26,120 --> 00:39:26,340
Order.

1987
00:39:26,660 --> 00:39:26,920
The.

1988
00:39:27,000 --> 00:39:27,260
Interesting.

1989
00:39:27,400 --> 00:39:27,580
Part.

1990
00:39:27,680 --> 00:39:27,860
Is.

1991
00:39:27,880 --> 00:39:28,020
That.

1992
00:39:28,160 --> 00:39:28,420
The.

1993
00:39:47,280 --> 00:39:47,500
Slash.

1994
00:39:47,500 --> 00:39:47,740
Library.

1995
00:39:47,960 --> 00:39:48,160
Pearl.

1996
00:39:48,300 --> 00:39:48,520
Five.

1997
00:39:48,660 --> 00:39:48,820
Point.

1998
00:39:48,860 --> 00:39:49,120
Thirty.

1999
00:39:49,220 --> 00:39:49,460
File.

2000
00:39:49,560 --> 00:39:49,780
Base.

2001
00:39:49,800 --> 00:39:49,920
Name.

2002
00:39:49,980 --> 00:39:50,120
Dot.

2003
00:39:50,140 --> 00:39:50,300
P.

2004
00:39:50,300 --> 00:39:50,420
M.

2005
00:39:50,440 --> 00:39:50,580
With.

2006
00:39:50,780 --> 00:39:51,060
Arbitrary.

2007
00:39:51,120 --> 00:39:51,400
Content.

2008
00:39:51,960 --> 00:39:52,240
And.

2009
00:39:52,640 --> 00:39:52,920
You.

2010
00:39:52,960 --> 00:39:53,000
Know.

2011
00:39:53,040 --> 00:39:53,320
Trigger.

2012
00:39:53,440 --> 00:39:53,700
Pearl.

2013
00:39:53,780 --> 00:39:54,020
Without.

2014
00:39:54,440 --> 00:39:54,720
Poisoning.

2015
00:39:54,720 --> 00:39:54,940
Any.

2016
00:39:55,340 --> 00:39:55,620
Variables.

2017
00:39:56,000 --> 00:39:56,280
And.

2018
00:39:56,320 --> 00:39:56,500
Have.

2019
00:39:56,520 --> 00:39:56,700
It.

2020
00:39:57,180 --> 00:39:57,460
Basically.

2021
00:39:57,600 --> 00:39:57,860
Run.

2022
00:39:57,860 --> 00:39:57,960
Our.

2023
00:39:58,260 --> 00:39:58,540
Arbitrary.

2024
00:39:58,780 --> 00:39:59,060
Commands.

2025
00:39:59,500 --> 00:39:59,780
Which.

2026
00:40:00,220 --> 00:40:00,500
Works.

2027
00:40:00,500 --> 00:40:00,680
And.

2028
00:40:00,740 --> 00:40:00,940
Doesn't.

2029
00:40:00,980 --> 00:40:01,260
Work.

2030
00:40:01,860 --> 00:40:02,140
It.

2031
00:40:02,160 --> 00:40:02,440
Works.

2032
00:40:02,840 --> 00:40:03,120
But.

2033
00:40:03,680 --> 00:40:03,960
We.

2034
00:40:04,020 --> 00:40:04,100
Were.

2035
00:40:04,180 --> 00:40:04,260
Able.

2036
00:40:04,320 --> 00:40:04,460
To.

2037
00:40:04,780 --> 00:40:05,060
Infect.

2038
00:40:05,140 --> 00:40:05,420
Pearl.

2039
00:40:05,560 --> 00:40:05,740
But.

2040
00:40:05,780 --> 00:40:06,000
Not.

2041
00:40:06,020 --> 00:40:06,180
For.

2042
00:40:06,220 --> 00:40:06,460
C.

2043
00:40:06,700 --> 00:40:06,980
Bypassing.

2044
00:40:07,080 --> 00:40:07,360
Purposes.

2045
00:40:07,900 --> 00:40:08,180
The.

2046
00:40:08,280 --> 00:40:08,540
Reason.

2047
00:40:08,620 --> 00:40:08,800
For.

2048
00:40:08,860 --> 00:40:09,000
That.

2049
00:40:09,020 --> 00:40:09,200
Is.

2050
00:40:09,220 --> 00:40:09,440
Because.

2051
00:40:09,440 --> 00:40:09,660
Apple.

2052
00:40:09,960 --> 00:40:10,240
Also.

2053
00:40:10,380 --> 00:40:10,600
Had.

2054
00:40:10,680 --> 00:40:10,740
A.

2055
00:40:10,880 --> 00:40:11,160
Tactical.

2056
00:40:11,180 --> 00:40:11,460
Fix.

2057
00:40:11,860 --> 00:40:12,140
If.

2058
00:40:12,160 --> 00:40:12,220
You.

2059
00:40:12,260 --> 00:40:12,400
Remember.

2060
00:40:12,500 --> 00:40:12,680
That.

2061
00:40:12,740 --> 00:40:13,020
Drop.

2062
00:40:13,100 --> 00:40:13,380
Sip.

2063
00:40:13,980 --> 00:40:14,260
Binary.

2064
00:40:14,400 --> 00:40:14,580
That.

2065
00:40:14,640 --> 00:40:14,740
We.

2066
00:40:14,760 --> 00:40:15,040
Started.

2067
00:40:15,100 --> 00:40:15,300
The.

2068
00:40:15,340 --> 00:40:15,620
Talk.

2069
00:40:15,680 --> 00:40:15,900
With.

2070
00:40:16,300 --> 00:40:16,580
Well.

2071
00:40:16,820 --> 00:40:17,100
What.

2072
00:40:17,240 --> 00:40:17,520
Apple.

2073
00:40:17,640 --> 00:40:17,900
Is.

2074
00:40:17,940 --> 00:40:18,040
Now.

2075
00:40:18,120 --> 00:40:18,400
Doing.

2076
00:40:18,400 --> 00:40:18,620
Is.

2077
00:40:18,700 --> 00:40:18,980
Basically.

2078
00:40:19,280 --> 00:40:19,560
Dropping.

2079
00:40:19,640 --> 00:40:19,840
C.

2080
00:40:20,200 --> 00:40:20,480
Bypassing.

2081
00:40:20,640 --> 00:40:20,920
Capabilities.

2082
00:40:21,060 --> 00:40:21,340
Before.

2083
00:40:21,700 --> 00:40:21,980
Launching.

2084
00:40:21,980 --> 00:40:22,200
Those.

2085
00:40:22,320 --> 00:40:22,600
Crits.

2086
00:40:22,800 --> 00:40:23,080
Which.

2087
00:40:23,200 --> 00:40:23,280
Is.

2088
00:40:23,320 --> 00:40:23,440
Kind.

2089
00:40:23,580 --> 00:40:23,620
Of.

2090
00:40:23,660 --> 00:40:23,780
Like.

2091
00:40:23,800 --> 00:40:23,920
A.

2092
00:40:24,000 --> 00:40:24,280
Tactical.

2093
00:40:24,320 --> 00:40:24,600
Fix.

2094
00:40:24,740 --> 00:40:24,920
But.

2095
00:40:25,000 --> 00:40:25,180
It.

2096
00:40:25,220 --> 00:40:25,400
Works.

2097
00:40:25,540 --> 00:40:25,760
Because.

2098
00:40:26,220 --> 00:40:26,500
You.

2099
00:40:26,560 --> 00:40:26,740
Can't.

2100
00:40:26,800 --> 00:40:26,900
Do.

2101
00:40:27,000 --> 00:40:27,220
Anything.

2102
00:40:27,340 --> 00:40:27,540
Even.

2103
00:40:27,600 --> 00:40:27,760
If.

2104
00:40:27,800 --> 00:40:27,840
You.

2105
00:40:27,940 --> 00:40:28,220
Affect.

2106
00:40:28,840 --> 00:40:29,120
Pearl.

2107
00:40:29,420 --> 00:40:29,680
It.

2108
00:40:29,760 --> 00:40:29,920
Doesn't.

2109
00:40:29,920 --> 00:40:30,060
Have.

2110
00:40:30,180 --> 00:40:30,300
The.

2111
00:40:30,740 --> 00:40:30,980
Bypassing.

2112
00:40:31,140 --> 00:40:31,380
Capabilities.

2113
00:40:31,600 --> 00:40:31,840
Anymore.

2114
00:40:32,240 --> 00:40:32,480
So.

2115
00:40:32,580 --> 00:40:32,780
You.

2116
00:40:32,860 --> 00:40:33,060
Can't.

2117
00:40:33,080 --> 00:40:33,200
Use.

2118
00:40:33,300 --> 00:40:33,420
That.

2119
00:40:33,460 --> 00:40:33,660
For.

2120
00:40:34,280 --> 00:40:34,520
Bypassing.

2121
00:40:34,580 --> 00:40:34,820
Sip.

2122
00:40:35,100 --> 00:40:35,340
It's.

2123
00:40:35,400 --> 00:40:35,460
A.

2124
00:40:35,540 --> 00:40:35,600
Cool.

2125
00:40:35,720 --> 00:40:35,880
Way.

2126
00:40:35,940 --> 00:40:36,080
To.

2127
00:40:36,300 --> 00:40:36,540
Persist.

2128
00:40:37,080 --> 00:40:37,320
In.

2129
00:40:37,380 --> 00:40:37,540
An.

2130
00:40:37,680 --> 00:40:37,920
Pearl.

2131
00:40:38,880 --> 00:40:39,120
Intensive.

2132
00:40:39,300 --> 00:40:39,540
Environment.

2133
00:40:40,100 --> 00:40:40,340
But.

2134
00:40:40,400 --> 00:40:40,580
Not.

2135
00:40:40,600 --> 00:40:40,800
Good.

2136
00:40:40,860 --> 00:40:41,020
For.

2137
00:40:41,020 --> 00:40:41,220
This.

2138
00:40:41,500 --> 00:40:41,820
Exploit.

2139
00:40:41,840 --> 00:40:42,000
At.

2140
00:40:42,040 --> 00:40:42,280
Least.

2141
00:40:43,500 --> 00:40:43,820
So.

2142
00:40:43,980 --> 00:40:44,300
That's.

2143
00:40:44,300 --> 00:40:44,580
That's.

2144
00:40:44,600 --> 00:40:44,700
The.

2145
00:40:44,780 --> 00:40:44,940
End.

2146
00:40:45,000 --> 00:40:45,320
Really.

2147
00:40:46,360 --> 00:40:46,680
The.

2148
00:40:46,800 --> 00:40:47,120
Vulnerability.

2149
00:40:47,200 --> 00:40:47,460
Was.

2150
00:40:47,560 --> 00:40:47,820
Assigned.

2151
00:40:47,880 --> 00:40:48,020
With.

2152
00:40:48,040 --> 00:40:48,200
CV.

2153
00:40:48,500 --> 00:40:48,820
2023.

2154
00:40:50,120 --> 00:40:50,440
32369.

2155
00:40:50,980 --> 00:40:51,300
Apple.

2156
00:40:51,420 --> 00:40:51,700
Has.

2157
00:40:51,780 --> 00:40:52,060
Really.

2158
00:40:52,140 --> 00:40:52,440
Made.

2159
00:40:52,440 --> 00:40:52,620
An.

2160
00:40:52,680 --> 00:40:53,000
Amazing.

2161
00:40:53,180 --> 00:40:53,500
Impression.

2162
00:40:53,500 --> 00:40:53,680
On.

2163
00:40:53,740 --> 00:40:54,000
Us.

2164
00:40:54,260 --> 00:40:54,580
Those.

2165
00:40:54,680 --> 00:40:54,800
Are.

2166
00:40:54,800 --> 00:40:55,000
Solid.

2167
00:40:55,560 --> 00:40:55,760
Fixes.

2168
00:40:55,860 --> 00:40:56,060
And.

2169
00:40:56,560 --> 00:40:56,760
You.

2170
00:40:56,860 --> 00:40:56,880
Know.

2171
00:40:56,940 --> 00:40:57,140
Besides.

2172
00:40:57,300 --> 00:40:57,420
The.

2173
00:40:57,660 --> 00:40:57,860
Tactical.

2174
00:40:58,020 --> 00:40:58,220
Fix.

2175
00:40:58,280 --> 00:40:58,480
Which.

2176
00:40:58,540 --> 00:40:58,640
Is.

2177
00:40:58,680 --> 00:40:58,840
Good.

2178
00:40:59,260 --> 00:40:59,460
Like.

2179
00:40:59,520 --> 00:40:59,620
The.

2180
00:40:59,640 --> 00:40:59,780
Other.

2181
00:40:59,840 --> 00:40:59,980
Two.

2182
00:41:00,220 --> 00:41:00,420
Fixes.

2183
00:41:00,420 --> 00:41:00,600
The.

2184
00:41:00,640 --> 00:41:00,840
Launch.

2185
00:41:01,300 --> 00:41:01,500
Constraints.

2186
00:41:01,600 --> 00:41:01,720
And.

2187
00:41:01,780 --> 00:41:01,840
The.

2188
00:41:01,920 --> 00:41:02,020
Fact.

2189
00:41:02,100 --> 00:41:02,200
That.

2190
00:41:02,280 --> 00:41:02,340
There.

2191
00:41:02,400 --> 00:41:02,440
Are.

2192
00:41:18,760 --> 00:41:18,960
No.

2193
00:41:18,960 --> 00:41:19,100
More.

2194
00:41:19,100 --> 00:41:19,200
And.

2195
00:41:19,780 --> 00:41:20,020
Poisoning.

2196
00:41:20,080 --> 00:41:20,140
And.

2197
00:41:20,160 --> 00:41:20,280
Stuff.

2198
00:41:20,300 --> 00:41:20,460
Like.

2199
00:41:20,500 --> 00:41:20,680
That.

2200
00:41:22,000 --> 00:41:22,240
Besides.

2201
00:41:22,460 --> 00:41:22,600
That.

2202
00:41:22,740 --> 00:41:22,980
Apple.

2203
00:41:23,100 --> 00:41:23,320
Has.

2204
00:41:23,400 --> 00:41:23,640
Granted.

2205
00:41:23,820 --> 00:41:24,060
A.

2206
00:41:24,260 --> 00:41:24,500
Really.

2207
00:41:24,720 --> 00:41:24,960
Nice.

2208
00:41:25,340 --> 00:41:25,580
Bounty.

2209
00:41:25,660 --> 00:41:25,860
Money.

2210
00:41:25,980 --> 00:41:26,220
Which.

2211
00:41:26,280 --> 00:41:26,420
We.

2212
00:41:26,600 --> 00:41:26,840
Donated.

2213
00:41:26,860 --> 00:41:27,040
To.

2214
00:41:27,220 --> 00:41:27,460
Charity.

2215
00:41:29,080 --> 00:41:29,320
If.

2216
00:41:29,400 --> 00:41:29,580
You.

2217
00:41:29,700 --> 00:41:29,740
Don't.

2218
00:41:29,840 --> 00:41:29,900
Know.

2219
00:41:29,960 --> 00:41:30,100
That.

2220
00:41:30,140 --> 00:41:30,320
By.

2221
00:41:30,360 --> 00:41:30,440
The.

2222
00:41:30,440 --> 00:41:30,540
Way.

2223
00:41:30,600 --> 00:41:30,720
And.

2224
00:41:30,800 --> 00:41:30,820
You.

2225
00:41:30,960 --> 00:41:31,020
Get.

2226
00:41:31,220 --> 00:41:31,420
Bounty.

2227
00:41:31,480 --> 00:41:31,680
From.

2228
00:41:31,880 --> 00:41:32,080
One.

2229
00:41:32,180 --> 00:41:32,240
Of.

2230
00:41:32,260 --> 00:41:32,360
These.

2231
00:41:32,440 --> 00:41:32,600
Big.

2232
00:41:32,800 --> 00:41:33,000
Companies.

2233
00:41:33,120 --> 00:41:33,220
You.

2234
00:41:33,280 --> 00:41:33,340
Can.

2235
00:41:33,400 --> 00:41:33,580
Ask.

2236
00:41:33,620 --> 00:41:33,740
Them.

2237
00:41:33,780 --> 00:41:33,900
To.

2238
00:41:33,960 --> 00:41:34,160
Donate.

2239
00:41:34,180 --> 00:41:34,300
To.

2240
00:41:34,400 --> 00:41:34,600
Charity.

2241
00:41:34,700 --> 00:41:34,800
And.

2242
00:41:34,840 --> 00:41:34,920
They.

2243
00:41:35,020 --> 00:41:35,100
Will.

2244
00:41:35,300 --> 00:41:35,500
Usually.

2245
00:41:35,700 --> 00:41:35,900
Double.

2246
00:41:36,000 --> 00:41:36,120
That.

2247
00:41:36,220 --> 00:41:36,420
Amount.

2248
00:41:36,820 --> 00:41:37,020
So.

2249
00:41:37,700 --> 00:41:37,900
Donate.

2250
00:41:37,920 --> 00:41:38,040
To.

2251
00:41:38,040 --> 00:41:38,460
Charity.

2252
00:41:38,520 --> 00:41:38,760
If.

2253
00:41:38,960 --> 00:41:39,200
You.

2254
00:41:39,400 --> 00:41:39,640
I.

2255
00:41:39,740 --> 00:41:39,840
Mean.

2256
00:41:39,880 --> 00:41:39,980
If.

2257
00:41:40,060 --> 00:41:40,100
You.

2258
00:41:40,240 --> 00:41:40,280
Into.

2259
00:41:40,380 --> 00:41:40,560
That.

2260
00:41:40,760 --> 00:41:41,000
And.

2261
00:41:41,120 --> 00:41:41,180
We.

2262
00:41:41,280 --> 00:41:41,400
Wish.

2263
00:41:41,420 --> 00:41:41,520
To.

2264
00:41:41,540 --> 00:41:41,660
Thank.

2265
00:41:41,800 --> 00:41:42,020
Apple.

2266
00:41:42,120 --> 00:41:42,300
For.

2267
00:41:42,700 --> 00:41:42,940
Everything.

2268
00:41:43,120 --> 00:41:43,360
Here.

2269
00:41:44,180 --> 00:41:44,420
And.

2270
00:41:45,020 --> 00:41:45,260
It.

2271
00:41:45,340 --> 00:41:45,460
Is.

2272
00:41:45,480 --> 00:41:45,620
Our.

2273
00:41:45,740 --> 00:41:45,920
Point.

2274
00:41:45,980 --> 00:41:46,120
Of.

2275
00:41:46,140 --> 00:41:46,300
View.

2276
00:41:46,320 --> 00:41:46,480
That.

2277
00:41:46,520 --> 00:41:46,720
With.

2278
00:41:46,780 --> 00:41:47,020
Apple.

2279
00:41:47,020 --> 00:41:47,280
Moving.

2280
00:41:47,820 --> 00:41:48,100
Everything.

2281
00:41:48,480 --> 00:41:48,760
To.

2282
00:41:48,860 --> 00:41:49,060
User.

2283
00:41:49,120 --> 00:41:49,360
Land.

2284
00:41:49,420 --> 00:41:49,520
And.

2285
00:41:49,580 --> 00:41:49,800
Creating.

2286
00:41:50,060 --> 00:41:50,340
Separate.

2287
00:41:50,340 --> 00:41:50,580
Security.

2288
00:41:50,820 --> 00:41:51,100
Layers.

2289
00:41:51,140 --> 00:41:51,300
As.

2290
00:41:51,360 --> 00:41:51,400
You.

2291
00:41:51,440 --> 00:41:51,540
Could.

2292
00:41:51,580 --> 00:41:51,660
Have.

2293
00:41:51,700 --> 00:41:51,860
Seen.

2294
00:41:51,880 --> 00:41:52,040
With.

2295
00:41:52,100 --> 00:41:52,200
All.

2296
00:41:52,260 --> 00:41:52,340
The.

2297
00:41:52,400 --> 00:41:52,680
Entitlements.

2298
00:41:52,880 --> 00:41:52,980
And.

2299
00:41:53,040 --> 00:41:53,120
Stuff.

2300
00:41:53,180 --> 00:41:53,340
Like.

2301
00:41:53,360 --> 00:41:53,520
That.

2302
00:41:54,440 --> 00:41:54,720
And.

2303
00:41:55,100 --> 00:41:55,380
They're.

2304
00:41:55,520 --> 00:41:55,800
Basically.

2305
00:41:55,920 --> 00:41:56,200
Killing.

2306
00:41:57,200 --> 00:41:57,480
Kernel.

2307
00:41:57,720 --> 00:41:58,000
Extensions.

2308
00:41:58,000 --> 00:41:58,300
And.

2309
00:41:58,500 --> 00:41:58,680
Not.

2310
00:41:58,720 --> 00:41:58,880
So.

2311
00:41:59,360 --> 00:41:59,600
You.

2312
00:41:59,660 --> 00:41:59,780
Know.

2313
00:42:00,300 --> 00:42:00,540
There.

2314
00:42:00,640 --> 00:42:00,780
Are.

2315
00:42:00,800 --> 00:42:01,040
Like.

2316
00:42:01,080 --> 00:42:01,160
The.

2317
00:42:01,300 --> 00:42:01,540
Peasants.

2318
00:42:01,720 --> 00:42:01,960
And.

2319
00:42:01,980 --> 00:42:02,200
And.

2320
00:42:02,240 --> 00:42:02,420
Apple.

2321
00:42:03,020 --> 00:42:03,260
And.

2322
00:42:03,680 --> 00:42:03,920
In.

2323
00:42:04,160 --> 00:42:04,220
The.

2324
00:42:04,300 --> 00:42:04,600
O.S.

2325
00:42:04,600 --> 00:42:04,720
At.

2326
00:42:04,780 --> 00:42:04,920
Least.

2327
00:42:05,860 --> 00:42:06,100
And.

2328
00:42:06,400 --> 00:42:06,640
Because.

2329
00:42:06,720 --> 00:42:06,840
They.

2330
00:42:07,080 --> 00:42:07,180
The.

2331
00:42:07,240 --> 00:42:07,320
Keys.

2332
00:42:07,400 --> 00:42:07,500
To.

2333
00:42:07,540 --> 00:42:07,620
The.

2334
00:42:07,660 --> 00:42:07,860
Kingdom.

2335
00:42:07,860 --> 00:42:08,180
We.

2336
00:42:08,660 --> 00:42:08,860
Believe.

2337
00:42:08,880 --> 00:42:09,060
That.

2338
00:42:09,160 --> 00:42:09,360
Similar.

2339
00:42:10,000 --> 00:42:10,200
Bypasses.

2340
00:42:10,200 --> 00:42:10,400
Will.

2341
00:42:10,540 --> 00:42:10,740
Basically.

2342
00:42:10,940 --> 00:42:11,140
Shake.

2343
00:42:11,180 --> 00:42:11,260
The.

2344
00:42:11,320 --> 00:42:11,420
Mac.

2345
00:42:11,440 --> 00:42:11,720
O.S.

2346
00:42:12,020 --> 00:42:12,220
Ecosystem.

2347
00:42:12,320 --> 00:42:12,500
Because.

2348
00:42:12,680 --> 00:42:12,880
Again.

2349
00:42:13,360 --> 00:42:13,560
In.

2350
00:42:13,660 --> 00:42:13,820
This.

2351
00:42:13,880 --> 00:42:14,080
Case.

2352
00:42:14,100 --> 00:42:14,260
We.

2353
00:42:14,340 --> 00:42:14,400
Were.

2354
00:42:14,480 --> 00:42:14,680
Lucky.

2355
00:42:14,760 --> 00:42:14,920
That.

2356
00:42:15,060 --> 00:42:15,260
We.

2357
00:42:15,300 --> 00:42:15,380
Are.

2358
00:42:15,460 --> 00:42:15,560
The.

2359
00:42:15,660 --> 00:42:15,860
Ones.

2360
00:42:15,860 --> 00:42:15,960
Who.

2361
00:42:16,020 --> 00:42:16,200
Found.

2362
00:42:16,220 --> 00:42:16,380
It.

2363
00:42:16,400 --> 00:42:16,540
But.

2364
00:42:16,540 --> 00:42:16,680
If.

2365
00:42:17,000 --> 00:42:17,220
You.

2366
00:42:17,320 --> 00:42:17,400
Know.

2367
00:42:17,460 --> 00:42:17,680
There.

2368
00:42:17,800 --> 00:42:17,920
Is.

2369
00:42:18,000 --> 00:42:18,220
Some.

2370
00:42:18,520 --> 00:42:18,740
Malware.

2371
00:42:18,820 --> 00:42:19,000
Author.

2372
00:42:19,120 --> 00:42:19,320
That.

2373
00:42:19,360 --> 00:42:19,580
Finds.

2374
00:42:19,660 --> 00:42:19,860
Something.

2375
00:42:19,880 --> 00:42:20,040
Like.

2376
00:42:20,100 --> 00:42:20,240
That.

2377
00:42:20,540 --> 00:42:20,760
They.

2378
00:42:20,860 --> 00:42:20,940
Can.

2379
00:42:21,000 --> 00:42:21,180
Create.

2380
00:42:21,300 --> 00:42:21,480
Under.

2381
00:42:21,540 --> 00:42:21,740
Little.

2382
00:42:22,200 --> 00:42:22,420
Untitled.

2383
00:42:22,980 --> 00:42:23,200
Malware.

2384
00:42:23,300 --> 00:42:23,360
And.

2385
00:42:23,400 --> 00:42:23,480
Stuff.

2386
00:42:23,520 --> 00:42:23,680
Like.

2387
00:42:23,700 --> 00:42:23,840
That.

2388
00:42:23,880 --> 00:42:24,080
And.

2389
00:42:24,280 --> 00:42:24,500
No.

2390
00:42:24,600 --> 00:42:24,740
One.

2391
00:42:24,740 --> 00:42:24,840
Will.

2392
00:42:24,920 --> 00:42:24,980
Be.

2393
00:42:24,980 --> 00:42:25,080
Able.

2394
00:42:25,200 --> 00:42:25,260
To.

2395
00:42:25,440 --> 00:42:25,620
Anything.

2396
00:42:25,740 --> 00:42:26,020
Besides.

2397
00:42:26,140 --> 00:42:26,420
Apple.

2398
00:42:26,800 --> 00:42:27,080
Which.

2399
00:42:27,160 --> 00:42:27,420
Might.

2400
00:42:27,500 --> 00:42:27,660
Be.

2401
00:42:27,660 --> 00:42:27,800
Too.

2402
00:42:27,920 --> 00:42:28,180
Late.

2403
00:42:29,320 --> 00:42:29,600
So.

2404
00:42:29,740 --> 00:42:29,960
I.

2405
00:42:30,000 --> 00:42:30,140
Think.

2406
00:42:30,340 --> 00:42:30,620
That's.

2407
00:42:30,640 --> 00:42:30,920
Pretty.

2408
00:42:31,040 --> 00:42:31,320
Much.

2409
00:42:31,460 --> 00:42:31,700
It.

2410
00:42:32,080 --> 00:42:32,360
Well.

2411
00:42:32,460 --> 00:42:32,700
Thank.

2412
00:42:32,820 --> 00:42:32,880
You.

2413
00:42:32,920 --> 00:42:33,080
So.

2414
00:42:33,100 --> 00:42:33,360
Much.