Let's go apple picking: Scaling macOS bug discovery

Conducting macOS security research at scale is hard. Useful telemetry is strictly limited to entitled applications, and taking ad hoc approaches to interrogate system binaries entails disabling OS protections, which can potentially taint observable events. Background A comment from Gergely Kalman , one of the first macOS security bloggers I was ever introduced to, often comes to mind; "Do dumb…