Hacker News
points by tedd4u 1 day ago | 0 comments
They have it. It’s called Xprotect. I’m surprised it hasn’t been used to remove the bad certs.

https://fullmetalmac.com/cybersecurity/macos-security/xprote...

[–] saagarjha 1 day ago
XProtect removes malware, not certificates
[–] tonymet 1 day ago
what are the capabilities? presumably it could a apply a diff, patch or overwrite a file. in this case it's not even in the protected partition.