Chaos Communication Congress

MacOS Location Privacy Red Pill: A Rabbit Hole Resulting in 24 CVEs (38x87)

Air date: Dec 28, 2024

User location information is inherently privacy sensitive as it reveals a lot about us: Where do we work and live? Which cities, organizations & institutions do we visit? How does our weekly routine look like? When are we on a vacation and not at home? MacOS has introduced multiple layers of security mitigations to protect sensitive user location information from attackers and malicious applications over the years — but are these enough?