google/santa
View on GitHub ↗ ★ 4,497 Objective-C++ archived
A binary authorization and monitoring system for macOS
23 mentions on Hacker News by 22 people: 12 stories, 11 comments · first 2014-12-01 · latest 2024-05-21
20082026
-
…a silent block, which always felt like overkill when I was using it for solely that purpose. 1. https://github.com/google/santa
comment by db3pt0 · 2024-05-21 · in NoTunes is a macOS application that will prevent Apple Music from launching -
Not directly relevant but interesting... https://github.com/google/santa This is a product developed by Google that has at least been utilized internally to some extent. It's not perfect, but my previous company used it and it does prevent…
comment by Initial_BP · 2023-04-15 · in Remote code execution vulnerability in Google they are not willing to fix -
…launched and block executables it isn't aware of. A binary authorization system for macOS https://github.com/google/santa
comment by sitkack · 2022-12-07 · in VSCode remote code execution advisory -
…hear) Block unknown executables on company machines. Google developed Santa to protect themselves: https://github.com/google/santa > and that's all it takes to steal cookies and tokens post-mfa, Make post-MFA cookies and tokens…
comment by kccqzy · 2022-09-20 · in Uber investigating breach of its computer systems -
Santa is open-source: https://github.com/google/santa
comment by dehrmann · 2022-08-01 · in Google’s in-house desktop Linux -
…I'd never heard of this before. "A binary authorization system for macOS". Open source. https://github.com/google/santa
comment by lapcat · 2022-06-24 · in Hardening macOS -
https://github.com/google/santa is used to whitelist binaries on Macs, but you can fill out a form to instantly opt out. One of the options for why is "I use a package manager".
comment by tbodt · 2020-04-10 · in Google bans Zoom from employees' computers -
…is also code-signed, which is important to some organizations which relies on binary whitelisting (e.g. github.com/google/santa). Software from Homebrew or Anaconda are typically not code-signed. I was hoping that perhaps bringing the old…
comment by sslalready · 2018-08-25 · in So far #macOS Mojave ships with Python 2.7.10 -
…When people do not code-sign their software every software update is painful. At work, where we run https://github.com/google/santa , it frequently happens that companies with code-signed software forget to code-sign their auto-updater, or…
comment by sslalready · 2017-09-07 · in Vagrant 2.0 -
…downloads on a reputable site(Github), instead of developer's own PHP backend. Software like https://github.com/google/santa can help, especially if you're doing IT in a large enterprise. The feed used by the software's autoupdate…
comment by zalmoxes · 2017-05-06 · in Recent version of Handbrake download infected with malware -
https://github.com/google/santa seems like it takes this approach. Gives an enterprise the ability to decide which signed certs it wants to trust and then block everything else unless it gets vetted.
comment by datguacdoh · 2016-07-10 · in Symantec's Bad Week