Hacker News new | ask | show | jobs
by zw 3824 days ago
[Really easy to enable.](http://internals.exposed/blog/dtrace-vs-sip.html)

But, hey, sure. Don't let that stop you from getting angry. Merry Christmas.

There should be a bingo card for this thread. "#doomed" "taking away freedoms". Free space is "What Steve would've done".

1 comments

TFA addressed that. For the regular folk, this will be fine. For security researchers, it's a big flag that will let malware change its behavior.

He also posted a handy screenshot that shows Dtrace not working on some binaries even with SIP completely off.

SIP is turned on in the screenshot.

> System Integrity Protection status: enabled.

Ack, you're correct. SIP is on, but everything is disabled.