search

SummitRoute / osxlockdown

[No longer maintained] Apple OS X tool to audit for, and remediate, security configuration settings.
MIT License
776 stars 51 forks source link

Check Sparkle updater #31

Closed 0xdabbad00 closed 8 years ago

0xdabbad00 commented 8 years ago

Sparkle is used by many third-party apps. It should never use HTTP. Check for that. Should be possible using:

for i in /Applications/*/Contents/Info.plist; do defaults read "$i" SUFeedURL 2>/dev/null; done