Hacker News new | ask | show | jobs
by michael_h 3833 days ago
TFA addressed that. For the regular folk, this will be fine. For security researchers, it's a big flag that will let malware change its behavior.

He also posted a handy screenshot that shows Dtrace not working on some binaries even with SIP completely off.

1 comments

SIP is turned on in the screenshot.

> System Integrity Protection status: enabled.

Ack, you're correct. SIP is on, but everything is disabled.