google/santa
View on GitHub ↗ ★ 4,497 Objective-C++ archived
A binary authorization and monitoring system for macOS
23 mentions on Hacker News by 22 people: 12 stories, 11 comments · first 2014-12-01 · latest 2024-05-21
20082026
-
…a silent block, which always felt like overkill when I was using it for solely that purpose. 1. https://github.com/google/santa
comment by db3pt0 · 2024-05-21 · in NoTunes is a macOS application that will prevent Apple Music from launching -
▲ 1
Santa: A binary authorization and monitoring system for macOSstory by nateb2022 · 2024-05-05 · 0 comments
-
Not directly relevant but interesting... https://github.com/google/santa This is a product developed by Google that has at least been utilized internally to some extent. It's not perfect, but my previous company used it and it does prevent…
comment by Initial_BP · 2023-04-15 · in Remote code execution vulnerability in Google they are not willing to fix -
…launched and block executables it isn't aware of. A binary authorization system for macOS https://github.com/google/santa
comment by sitkack · 2022-12-07 · in VSCode remote code execution advisory -
…hear) Block unknown executables on company machines. Google developed Santa to protect themselves: https://github.com/google/santa > and that's all it takes to steal cookies and tokens post-mfa, Make post-MFA cookies and tokens…
comment by kccqzy · 2022-09-20 · in Uber investigating breach of its computer systems -
Santa is open-source: https://github.com/google/santa
comment by dehrmann · 2022-08-01 · in Google’s in-house desktop Linux -
…I'd never heard of this before. "A binary authorization system for macOS". Open source. https://github.com/google/santa
comment by lapcat · 2022-06-24 · in Hardening macOS -
https://github.com/google/santa is used to whitelist binaries on Macs, but you can fill out a form to instantly opt out. One of the options for why is "I use a package manager".
comment by tbodt · 2020-04-10 · in Google bans Zoom from employees' computers -
▲ 2
Google / santa: A binary whitelisting/blacklisting system for macOSstory by zdw · 2020-02-28 · 0 comments
-
▲ 1
Santa: A binary whitelisting/blacklisting system for macOS by Googlestory by guessmyname · 2020-01-21 · 0 comments
-
▲ 14
Santa, a binary white/blacklisting app for macOS from Googlestory by tcsf · 2018-09-28 · 2 comments
-
…is also code-signed, which is important to some organizations which relies on binary whitelisting (e.g. github.com/google/santa). Software from Homebrew or Anaconda are typically not code-signed. I was hoping that perhaps bringing the old…
comment by sslalready · 2018-08-25 · in So far #macOS Mojave ships with Python 2.7.10 -
▲ 1
Google/santa: A binary whitelisting/blacklisting system for macOSstory by vinnyglennon · 2018-08-09 · 0 comments
-
▲ 1
Google/santa: A binary whitelisting/blacklisting system for Mac OS Xstory by walterbell · 2018-04-06 · 0 comments
-
▲ 2
Google's Santa – A binary whitelisting/blacklisting system for Mac OS Xstory by dgellow · 2018-03-27 · 0 comments
-
…When people do not code-sign their software every software update is painful. At work, where we run https://github.com/google/santa , it frequently happens that companies with code-signed software forget to code-sign their auto-updater, or…
comment by sslalready · 2017-09-07 · in Vagrant 2.0 -
▲ 3
Google/santa: A binary whitelisting/blacklisting system for Mac OS Xstory by tambourine_man · 2017-05-06 · 0 comments
-
…downloads on a reputable site(Github), instead of developer's own PHP backend. Software like https://github.com/google/santa can help, especially if you're doing IT in a large enterprise. The feed used by the software's autoupdate…
comment by zalmoxes · 2017-05-06 · in Recent version of Handbrake download infected with malware -
▲ 1
Google/santa: A binary whitelisting/blacklisting system for Mac OS Xstory by lelf · 2017-04-17 · 0 comments
-
▲ 1
Santa – A whitelisting/blacklisting system for macOS by Googlestory by jbernardo95 · 2016-08-19 · 0 comments
-
▲ 2
MaxOS executable whitelisting by Googlestory by xeniak · 2016-08-18 · 0 comments
-
https://github.com/google/santa seems like it takes this approach. Gives an enterprise the ability to decide which signed certs it wants to trust and then block everything else unless it gets vetted.
comment by datguacdoh · 2016-07-10 · in Symantec's Bad Week -
▲ 23
Santa: A binary whitelisting/blacklisting system for Mac OS Xstory by nl5887 · 2014-12-01 · 6 comments