You can spend 3 months writing a 0day for some obscure mach kernel handling bug to sneak your way to local root but did you try just asking the user for their password? You know which one has a higher ROI? The most simplistic one. This is why you get $22million dollar thefts from a UI, if you ask a user persistently enough in a manner that does not disrupt their usage of the machine or raise inconsistency in machine behavior - the user almost always enters the passwords as normal at the machine.
@fikran my password is your password, you loaned it to me. ;)
@hackerfantastic …crap…you win this round.
The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!